music

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text descriptions to generate music tracks and composition plans.
  • Ingestion Points: The prompt parameter in the music.compose, music.composition_plan.create, and music.compose_detailed methods across all files.
  • Boundary Markers: The skill does not define specific delimiters for separating user-provided music descriptions from instructions, relying on the underlying ElevenLabs model's content filters.
  • Capability Inventory: The skill performs network requests to api.elevenlabs.io and writes generated audio data to local files (e.g., output.mp3).
  • Sanitization: No explicit client-side sanitization is shown, though the API itself is documented to return errors and suggestions if prompts reference copyrighted material.
  • [EXTERNAL_DOWNLOADS]: Fetches official development tools from established public registries.
  • Installs the elevenlabs Python library from PyPI.
  • Installs the @elevenlabs/elevenlabs-js package from the NPM registry.
  • [COMMAND_EXECUTION]: The installation documentation includes standard package management commands for environment setup.
  • Includes pip install elevenlabs and npm install @elevenlabs/elevenlabs-js for library installation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 07:06 PM