ai-music-generation
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
beltCLI vianpx skills add belt-sh/cliand points to installation documentation hosted on GitHub athttps://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md. - [COMMAND_EXECUTION]: The skill uses the
beltCLI to perform several tasks, includingbelt loginfor service authentication,belt app listfor discovering models, andbelt app runto execute music generation workloads on the inference.sh platform. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided inputs such as music prompts and lyrics, which are then passed to external AI models via the CLI tool. This creates an ingestion surface for untrusted data, though the risk is mitigated by the specialized nature of the CLI interface which is designed specifically for media generation.
Audit Metadata