midi-generation
Pass
Audited by Gen Agent Trust Hub on Jun 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
skills/convert_to_wav.pyutilizessubprocess.run()to invoke thefluidsynthsystem utility for converting MIDI files to WAV audio. The implementation uses a list-based argument structure rather than a raw shell string, which is a standard security practice to prevent shell injection. Furthermore, filenames passed to this utility are sanitized inskills/generate_midi.pyusing regular expressions to remove potentially dangerous characters. - [EXTERNAL_DOWNLOADS]: The
README.mdandSKILL.mdfiles provide instructions for the user to download theA320U.sf2SoundFont frommusical-artifacts.com. This is a well-known community repository for musical artifacts and is required for the audio synthesis functionality of the skill.
Audit Metadata