add-sfx
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with 'https://sfx.woven.video' to fetch sound effect catalogs and download .wav audio assets. These resources are hosted on the author's official infrastructure.
- [COMMAND_EXECUTION]: The skill includes 'scripts/pull-library.sh', which executes shell commands and an inline Node.js script to resolve project paths and download assets to the local file system.
- [REMOTE_CODE_EXECUTION]: The setup documentation instructs users to execute 'npx -y woven-sfx-mcp', which downloads and runs the vendor's MCP server from the NPM registry to enable the skill's search and pull capabilities.
Audit Metadata