music-rhythm
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
music_analyzerPython module via a shell command to process audio files at a user-provided path. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external audio files, which serves as a potential attack surface for indirect prompt injection.
- Ingestion points: The skill reads audio data from the location specified in
<audio_file_path>(SKILL.md). - Boundary markers: None present for the content of the audio file.
- Capability inventory: Executes shell commands via
python3 -m(SKILL.md). - Sanitization: Step 1 of the skill instructions explicitly requires validation of the audio file path prior to analysis.
Audit Metadata