disc-forge
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill automates several system utilities using the
subprocessmodule. These includecdrdaofor disc burning,ffmpeg/ffprobefor audio processing and metadata extraction,drutilfor drive status, andhdiutilfor ISO creation. - Evidence in
scripts/burn_audio_cd.py,scripts/preflight.py,scripts/convert_to_wav.py,scripts/build_toc.py, andscripts/build_data_toc.py. - The scripts include sanitization measures such as
shlex.quotefor shell command construction and character escaping for data used in configuration files. - [EXTERNAL_DOWNLOADS]: The
stage_tracks.pyscript facilitates fetching files from remote servers usingsshandtarover the network. - This is a core feature for users sourcing music from remote libraries (e.g., a home server).
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill's behavior aligns with its stated purpose of CD burning automation.
Audit Metadata