audio-acquisition
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation suggests installing a package from a vendor-controlled GitHub repository (https://github.com/scrollmark/social-skills/archive/refs/heads/master.tar.gz) to enable additional audio features. This represents a standard extension of the skill's capabilities through vendor-owned resources.
- [COMMAND_EXECUTION]: The skill includes Python scripts (
scripts/measure.pyandscripts/normalize_audio.py) that execute theffmpegandffprobecommand-line tools. These executions are performed using structured argument lists insubprocess.run, which is a safe practice to prevent shell injection. - [CREDENTIALS_UNSAFE]: The documentation mentions the requirement for an external API key (
ELEVENLABS_API_KEY) for optional paid synthesis services. No secrets or credentials are hardcoded in the skill; it correctly instructs users on service requirements without exposing sensitive information.
Audit Metadata