music-generation
Warn
Audited by Snyk on Mar 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). SKILL.md's "With Reference Image" section shows a top-level image_urls parameter (e.g., "image_urls": ["https://example.com/scenic-photo.jpg"]) that causes the agent to fetch and interpret arbitrary external images to guide music generation, meaning untrusted third-party content can influence its outputs.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata