disc-forge

Pass

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates several system utilities using the subprocess module. These include cdrdao for disc burning, ffmpeg/ffprobe for audio processing and metadata extraction, drutil for drive status, and hdiutil for ISO creation.
  • Evidence in scripts/burn_audio_cd.py, scripts/preflight.py, scripts/convert_to_wav.py, scripts/build_toc.py, and scripts/build_data_toc.py.
  • The scripts include sanitization measures such as shlex.quote for shell command construction and character escaping for data used in configuration files.
  • [EXTERNAL_DOWNLOADS]: The stage_tracks.py script facilitates fetching files from remote servers using ssh and tar over the network.
  • This is a core feature for users sourcing music from remote libraries (e.g., a home server).
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill's behavior aligns with its stated purpose of CD burning automation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 20, 2026, 07:38 AM
Security Audit — agent-trust-hub — disc-forge