sound-design

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the user to execute local shell commands for audio generation and validation, such as python3 -m sfx and npm run sfx. These commands operate on local scripts and configuration files as part of the intended sound design workflow.
  • [INDIRECT_PROMPT_INJECTION]: The audio engine ingests data from a timeline.json file to coordinate sound events. While this represents a data ingestion surface, the parameters are used for audio synthesis (e.g., gain, timing, pitch) and are not executed as commands or instructions, limiting the risk of injection.
  • [EXTERNAL_DOWNLOADS]: The documentation references an optional integration with ElevenLabs via the Model Context Protocol (MCP) for generating voiceovers. ElevenLabs is a well-known service, and the integration follows standard agent extension patterns for its stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 12:37 PM