producer-music
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a configuration and instruction guide for using the AceDataCloud Producer API. It does not contain executable code that performs unauthorized actions.
- [CREDENTIALS_UNSAFE]: No sensitive credentials or hardcoded keys were detected. The skill correctly identifies the need for an API token and recommends using an environment variable (
.env) for secure storage. - [EXTERNAL_DOWNLOADS]: The skill documents network interaction with
api.acedata.cloud. These are legitimate requests to the vendor's service for music generation tasks and are considered safe according to vendor context rules. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing user-provided inputs such as lyrics and prompts. While this is a data ingestion point, it is necessary for the skill's primary function of music generation, and the documentation does not contain patterns suggesting exploitation of the agent context.
Audit Metadata