sheet-music-publisher

Fail

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill provides instructions in REQUIREMENTS.md for the agent to execute sudo apt install musescore, which requests root-level access for software installation.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to verify the presence of and execute external binaries (AnthemScore and MuseScore), as well as to run installation commands like pip install pypdf reportlab pyyaml and brew install --cask musescore.
  • [EXTERNAL_DOWNLOADS]: The skill directs the agent to download and install software from external domains including lunaverus.com and musescore.org.
  • [INDIRECT_PROMPT_INJECTION]: The skill implements a configuration override feature via load_override("sheet-music-preferences.md") in SKILL.md that allows user-controlled files to influence the agent's formatting and layout logic.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external audio files and their metadata as part of the transcription workflow, creating an injection surface for data-driven attacks. * Ingestion points: The sheet-music-preferences.md override file and track metadata from WAV files. * Boundary markers: None identified in the provided instructions. * Capability inventory: Shell command execution via Bash, file system modification via Write/Edit, and network access via package managers. * Sanitization: No explicit sanitization or validation of external content is described before interpolation into the agent's context.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 14, 2026, 07:13 PM