alterlab-genai-music-producer
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves processing data from external sources, which introduces a potential surface for indirect prompt injection.
- Ingestion points: The 'Agentic Protocol' and 'Creative Brief' sections (SKILL.md) instruct the agent to "search the web" and "read existing project files" for context.
- Boundary markers: The instructions lack explicit directives to use boundary markers or to ignore instructions potentially embedded within the external files or web content.
- Capability inventory: The agent is authorized to perform web searches and write structured markdown files (prompt libraries, lyrics, references) to the project directory.
- Sanitization: No specific validation or sanitization steps are defined for data ingested from the web or project environment before processing.
Audit Metadata