audio-acquisition

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation suggests installing a package from a vendor-controlled GitHub repository (https://github.com/scrollmark/social-skills/archive/refs/heads/master.tar.gz) to enable additional audio features. This represents a standard extension of the skill's capabilities through vendor-owned resources.
  • [COMMAND_EXECUTION]: The skill includes Python scripts (scripts/measure.py and scripts/normalize_audio.py) that execute the ffmpeg and ffprobe command-line tools. These executions are performed using structured argument lists in subprocess.run, which is a safe practice to prevent shell injection.
  • [CREDENTIALS_UNSAFE]: The documentation mentions the requirement for an external API key (ELEVENLABS_API_KEY) for optional paid synthesis services. No secrets or credentials are hardcoded in the skill; it correctly instructs users on service requirements without exposing sensitive information.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 08:03 AM