promo-video
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches its repository content, including instructions and assets, from the vendor's official GitHub account (renoise-ai) using curl.
- [COMMAND_EXECUTION]: The skill utilizes shell commands such as
mkdir,curl, andtarto download, unpack, and manage files in the local~/.cache/renoise-skills/directory. - [DYNAMIC_EXECUTION]: The skill acts as a loader that retrieves additional instructions and logic from a remote repository at runtime, specifically reading and following a downloaded SKILL.md file.
- [INDIRECT_PROMPT_INJECTION]: The skill processes instructions from a downloaded repository, which constitutes an ingestion point for external content. However, the source is the vendor's controlled repository, and the skill includes explicit requirements for user confirmation before executing financial or task-related actions.
Audit Metadata