AI audio engineering system: MCP server + Claude Code skills for professional automated mixing and mastering
- vulnerabilities attested + 18
- capability exposure inferred + 22
- tool safety inferred + 5
- trust mitigators mixed − 3
attested inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 2d ago · see ecosystem CVEs →
- B · 24 → C · 42
- C · 44 → B · 24
- C · 36 → C · 44
- medium dangerous code
dynamic exec: __import__()
analyzed commit 9156821 · analyzer v33 · 2d ago
skills & prompt files 7
- agent-rules fadelabs-phantom-9156821/AGENTS.md
- agent-rules fadelabs-phantom-9156821/CLAUDE.md
- skill fadelabs-phantom-9156821/plugin/skills/audio-diagnostician/SKILL.md
- skill fadelabs-phantom-9156821/plugin/skills/effects-engineer/SKILL.md
- skill fadelabs-phantom-9156821/plugin/skills/mastering-engineer/SKILL.md
- skill fadelabs-phantom-9156821/plugin/skills/mix-engineer/SKILL.md
- skill fadelabs-phantom-9156821/plugin/skills/session-architect/SKILL.md
danger signals2
- dynamic code execution __import__() fadelabs-phantom-9156821/src/phantom/_diagnostics.py :37
mod = __import__(name) - dynamic code execution __import__() fadelabs-phantom-9156821/tests/test_cli_doctor.py :54
mod = __import__(name)
[](https://mcpobservatory.com/servers/github:fadelabs/phantom/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of fadelabs.