song-recognition
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
recognize.pyscript executesffmpegandffprobeto extract audio clips and duration metadata. The implementation uses list-based arguments forsubprocess.run, which follows security best practices to prevent shell injection. - [EXTERNAL_DOWNLOADS]: The skill instructions utilize
uv runto dynamically include theshazamiolibrary. This is a standard dependency for interfacing with the Shazam API and is used here for its intended purpose.
Audit Metadata