code-to-music

Pass

Audited by Gen Agent Trust Hub on Feb 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): The skill's codebase was thoroughly reviewed and no security threats were identified. The logic strictly follows the intended purpose of music composition and audio processing.
  • [EXTERNAL_DOWNLOADS] (LOW): The install.sh script installs system-level dependencies (fluidsynth, ffmpeg, and soundfonts) using apt-get and Python packages from PyPI. While these operations require elevated privileges, they are restricted to official repositories and are necessary for the skill's functionality.
  • [COMMAND_EXECUTION] (LOW): The skill executes external binaries (fluidsynth and ffmpeg) through standard Python library wrappers (midi2audio and pydub). This execution is limited to processing music files and does not involve untrusted input in a way that would lead to arbitrary command injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 19, 2026, 01:03 PM