audio-visualizer
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input which is then interpolated into shell commands, creating a potential surface for command injection. 1. Ingestion points: The
titleparameter and the主题名(theme name) used in output paths inSKILL.md. 2. Boundary markers: No delimiters or explicit warnings are used to separate user-provided text from the command structure. 3. Capability inventory: The skill executes shell commands using thepythoninterpreter to run a local script (audio_viz.py). 4. Sanitization: There is no mention of sanitization or escaping of special shell characters for the user-supplied strings. - [COMMAND_EXECUTION]: The skill performs its primary function by executing a local Python script through the shell to interface with FFmpeg filters. This is a functional requirement and aligns with the tool's description.
Audit Metadata