elevenlabs-music

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires external components from the inference.sh platform to function. It provides instructions to install the belt-sh/cli package and several related skills from the inference-sh/skills repository using the npx skills add command. It also points to external documentation hosted at https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md. These dependencies are necessary for the skill's primary functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill takes user-supplied text for the prompt parameter, which is a vector for indirect prompt injection if the source data is untrusted.
  • Ingestion points: The prompt parameter in the belt app run elevenlabs/music command examples.
  • Boundary markers: None identified; user input is interpolated directly into a JSON string for the CLI command.
  • Capability inventory: The skill utilizes the Bash tool to execute belt CLI commands and can perform file operations (e.g., writing output to music.json).
  • Sanitization: No input sanitization or validation is specified for the prompt input.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:53 PM
Security Audit — agent-trust-hub — elevenlabs-music