pre-generation-check
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted track data and lyrics which could contain malicious instructions designed to influence the agent's behavior during the validation process.\n
- Ingestion points: Track files containing lyrics, frontmatter, and metadata tables (referenced in
SKILL.mdvia tools likeReadandGrep).\n - Boundary markers: Absent; there are no specific delimiters or instructions to ignore embedded commands within the lyrics or track details being validated.\n
- Capability inventory: File system access via
Read,Glob, andGrep, and execution of vendor-specific commands viabitwize-music-mcp(as seen inallowed-tools).\n - Sanitization: The skill does not perform sanitization or filtering to prevent the interpretation of instructions hidden within the track data.
Audit Metadata