music
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text descriptions to generate music tracks and composition plans.
- Ingestion Points: The
promptparameter in themusic.compose,music.composition_plan.create, andmusic.compose_detailedmethods across all files. - Boundary Markers: The skill does not define specific delimiters for separating user-provided music descriptions from instructions, relying on the underlying ElevenLabs model's content filters.
- Capability Inventory: The skill performs network requests to
api.elevenlabs.ioand writes generated audio data to local files (e.g.,output.mp3). - Sanitization: No explicit client-side sanitization is shown, though the API itself is documented to return errors and suggestions if prompts reference copyrighted material.
- [EXTERNAL_DOWNLOADS]: Fetches official development tools from established public registries.
- Installs the
elevenlabsPython library from PyPI. - Installs the
@elevenlabs/elevenlabs-jspackage from the NPM registry. - [COMMAND_EXECUTION]: The installation documentation includes standard package management commands for environment setup.
- Includes
pip install elevenlabsandnpm install @elevenlabs/elevenlabs-jsfor library installation.
Audit Metadata