songsee
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
songseeutility via a third-party Homebrew tap (steipete/tap/songsee). - [COMMAND_EXECUTION]: The skill facilitates the execution of the
songseecommand-line utility to process audio files and generate images. - [PROMPT_INJECTION]: The skill processes untrusted audio files which constitutes an indirect prompt injection surface.
- Ingestion points: Reads audio data from local files or standard input within SKILL.md.
- Boundary markers: No specific delimiters or safety instructions are used to separate untrusted file content from the processing instructions.
- Capability inventory: Executes the
songseebinary and may invokeffmpegfor media decoding. - Sanitization: No data validation or sanitization of audio file content is explicitly performed by the skill.
Audit Metadata