sox
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to install SoX via standard package managers (
apt install,brew install). This is the expected and safe method for software installation on supported platforms. - [COMMAND_EXECUTION]: The skill provides numerous examples of using the
soxandsoxiCLI tools for audio manipulation. These commands operate on local files provided by the user and do not exhibit dangerous behavior like reaching out to unknown network endpoints or accessing sensitive system credentials. - [COMMAND_EXECUTION]: Batch processing examples use standard shell loops (
for f in *.wav; do ... done) to automate audio conversion and normalization. This is a common and safe workflow for media processing. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill performs no network operations other than the initial installation from trusted system package repositories. It does not access sensitive file paths (e.g., SSH keys, environment variables) or attempt to transmit data externally.
- [PROMPT_INJECTION]: The instructions focus entirely on audio processing technicalities. There are no attempts to override agent behavior, bypass safety filters, or extract system prompts.
- [REMOTE_CODE_EXECUTION]: No remote scripts are downloaded or executed. All logic is contained within local shell commands and the SoX utility itself.
Audit Metadata