audio-denoise
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a pre-trained RNNoise model from a public repository (
https://github.com/GregorR/rnnoise-models/raw/master/somnolent-hogwash-2018-09-01/sh.rnnn) usingcurl. This model is required for Tier 3 denoising functionality.\n- [COMMAND_EXECUTION]: The skill executes a local Python script (skills/shared/scripts/audio_ops.py) to interface withffmpeg. This is the primary mechanism for the skill's functionality, used for probing file information and applying audio filters.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided audio/video files and parameters (tier,mix). This creates a potential attack surface for indirect prompt injection or command injection via malformed filenames or metadata.\n - Ingestion points:
input_filepath and user-specified parameters inSKILL.md.\n - Boundary markers: None specified.\n
- Capability inventory: Execution of local scripts and subprocess calls to
ffmpeg.\n - Sanitization: Not explicitly described; the skill relies on a wrapper script for command construction.
Audit Metadata