audio-mastering-cli
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local PowerShell script named
master_media.ps1to process audio and video files. - Evidence: Found in the execution flow of
SKILL.mdand usage examples inREADME.md. - The command uses the
-ExecutionPolicy Bypassflag. While common for running local scripts on Windows without configuration changes, it bypasses safety restrictions designed to prevent unauthorized script execution. - [PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection (Category 8) because it interpolates user-provided file paths directly into a system command string.
- Ingestion points: The
<ruta-archivo>input parameter inSKILL.mdis used to construct the command line. - Boundary markers: Absent; there are no delimiters or instructions to the agent to treat the input string as non-executable data.
- Capability inventory: The skill has the capability to execute shell commands via PowerShell and access the file system for read/write operations.
- Sanitization: Absent; the skill definition does not demonstrate any sanitization, escaping, or validation of the input path before it is interpolated into the command.
Audit Metadata