songsee
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
songseeutility from a public GitHub repository using the standard Go package manager (go install github.com/steipete/songsee/cmd/songsee@latest). This is a common practice for Go-based CLI tools. - [COMMAND_EXECUTION]: The skill instructs the agent to execute the
songseeCLI tool to process audio files and generate image-based visualizations. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted audio data to generate visual outputs intended for further automated analysis (e.g., via vision models).
- Ingestion points: Processes user-supplied audio files through the CLI tool as shown in
SKILL.mdexamples. - Boundary markers: None; the tool processes raw binary audio data.
- Capability inventory: Limited to the execution of the
songseebinary for file-to-file processing. - Sanitization: Standard audio decoding for WAV and MP3 formats.
Audit Metadata