audio
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
ffmpegandffprobecommands via Python'ssubprocess.runmodule. These calls are implemented using list-based arguments rather than shell strings, which effectively mitigates command injection risks. Key files performing these operations includescripts/concat.py,scripts/trim.py,scripts/normalize.py, andscripts/_mediaskills_common.py. - [DATA_EXPOSURE]: The skill interacts with files in the workspace to perform audio processing. File path handling uses
pathlibfor normalization and implements aresolve_outputhelper inscripts/_mediaskills_common.pyto ensure generated files are stored in a designated.mediaskills/generateddirectory within the workspace root. - [EXTERNAL_DOWNLOADS]: The skill documentation mentions the use of
uv runfor execution, but no remote packages or scripts are downloaded from untrusted sources. The scripts themselves have no external dependencies defined in their PEP 723 metadata blocks.
Audit Metadata