elevenlabs-music
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and installation scripts located in the
inference-shGitHub organization repository for setting up the required CLI tool. - [COMMAND_EXECUTION]: The skill uses the
beltCLI tool to interact with remote AI models. Execution is limited via theallowed-toolsfrontmatter to thebeltcommand only, adhering to the principle of least privilege. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill accepts user-defined text in the
promptandduration_secondsparameters. - Boundary markers: Input data is encapsulated within a JSON string and single-quoted shell arguments to reduce the risk of command or prompt breakout.
- Capability inventory: The skill's capabilities are restricted to executing the
beltcommand for music generation and media merging. - Sanitization: The skill relies on structured JSON formatting for data handling but does not implement additional programmatic sanitization filters.
Audit Metadata