code-to-music
Pass
Audited by Gen Agent Trust Hub on Feb 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): The skill's codebase was thoroughly reviewed and no security threats were identified. The logic strictly follows the intended purpose of music composition and audio processing.
- [EXTERNAL_DOWNLOADS] (LOW): The
install.shscript installs system-level dependencies (fluidsynth,ffmpeg, and soundfonts) usingapt-getand Python packages from PyPI. While these operations require elevated privileges, they are restricted to official repositories and are necessary for the skill's functionality. - [COMMAND_EXECUTION] (LOW): The skill executes external binaries (
fluidsynthandffmpeg) through standard Python library wrappers (midi2audioandpydub). This execution is limited to processing music files and does not involve untrusted input in a way that would lead to arbitrary command injection.
Audit Metadata