acestep-docs
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of documentation files (.md) providing instructions on how to use the ACE-Step software.
- [EXTERNAL_DOWNLOADS]: Documents the process of downloading project assets from files.acemusic.ai and cloning the source code from the official GitHub repository. These are identified as vendor resources.
- [REMOTE_CODE_EXECUTION]: Provides standard installation commands for the uv package manager via astral.sh using curl | sh and PowerShell. These are well-known installation patterns for this utility and do not represent a malicious threat in this context.
- [COMMAND_EXECUTION]: Contains instructions for executing local launch scripts (.bat and .sh) to start the web interface and API server, which is expected behavior for the described software.
- [CREDENTIALS_UNSAFE]: Uses placeholders (e.g., sk-your-secret-key) in documentation to demonstrate how to configure API authentication, with no actual secrets exposed.
Audit Metadata