alterlab-genai-audio-producer
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to read external project files, including scripts, episode outlines, and logs. These files are ingestion points for untrusted data that could contain instructions designed to manipulate the agent's behavior.
- Ingestion points: Specifically reads
{project}files,scripts,episode outlines, andbatch production logsfrom the local environment. - Boundary markers: The skill does not define clear delimiters or "ignore embedded instructions" directives when processing these files.
- Capability inventory: The agent is authorized to search the web for platform updates and write multiple deliverable files (
.md) to the project directory. - Sanitization: There are no explicit instructions to sanitize or validate the content of the ingested project files before processing them.
Audit Metadata