lyric-reviewer
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from external song files and research documents, which creates a potential surface for indirect instructions to influence the agent's behavior.
- Ingestion points: Track files (
tracks/*.md), album directories, andRESEARCH.mdfiles are read into the agent's context using theReadandGlobtools. - Boundary markers: The skill does not define explicit boundary markers or "ignore" instructions for the content of the lyrics or research files, assuming they contain only data.
- Capability inventory: The skill is authorized to use the
Edittool to modify track files (specifically for auto-fixing pronunciation in the Lyrics Box) and invokes custom analysis functions via thebitwize-music-mcptool. - Sanitization: No explicit sanitization or validation of the ingested text is performed before it is used for analysis or passed to editing tools.
Audit Metadata