music-to-dreamina
Warn
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a shell command
python3 -m music_analyzer dreamina "<input_path>"where<input_path>is a direct interpolation of user-supplied input. This pattern is susceptible to command injection if the input path contains shell metacharacters (e.g., backticks, semicolons, or subshell syntax) that are not properly sanitized or escaped by the agent platform before execution. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data from audio files or JSON analysis objects to generate prompts for image generation.
- Ingestion points: External files provided via the
<audio_file_or_analysis_json>argument inSKILL.md. - Boundary markers: The instructions do not define boundary markers or explicit delimiters to prevent the agent from following instructions that might be embedded within the music analysis JSON data.
- Capability inventory: The skill has the capability to execute the
music_analyzerCLI tool and recommends chaining the output to the/dreamina-gen-imagetool. - Sanitization: There is no evidence of input validation, schema enforcement for the JSON analysis, or sanitization of the generated prompts before they are passed to the next stage of the workflow.
Audit Metadata