songsee
Warn
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include a command to install a binary using
go install github.com/steipete/songsee/cmd/songsee@latest. This process fetches source code from a third-party repository and compiles it locally, introducing a dependency on unverified external code. - [COMMAND_EXECUTION]: The skill's primary function is to execute the
songseecommand-line utility. It passes user-provided audio file paths and output file names directly to the shell, which could be a vector for issues if input is not properly handled by the agent.
Audit Metadata