sound-design
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to execute local shell commands for audio generation and validation, such as
python3 -m sfxandnpm run sfx. These commands operate on local scripts and configuration files as part of the intended sound design workflow. - [INDIRECT_PROMPT_INJECTION]: The audio engine ingests data from a
timeline.jsonfile to coordinate sound events. While this represents a data ingestion surface, the parameters are used for audio synthesis (e.g., gain, timing, pitch) and are not executed as commands or instructions, limiting the risk of injection. - [EXTERNAL_DOWNLOADS]: The documentation references an optional integration with ElevenLabs via the Model Context Protocol (MCP) for generating voiceovers. ElevenLabs is a well-known service, and the integration follows standard agent extension patterns for its stated purpose.
Audit Metadata