sheet-music-publisher
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill provides instructions in REQUIREMENTS.md for the agent to execute
sudo apt install musescore, which requests root-level access for software installation. - [COMMAND_EXECUTION]: The skill utilizes the Bash tool to verify the presence of and execute external binaries (AnthemScore and MuseScore), as well as to run installation commands like
pip install pypdf reportlab pyyamlandbrew install --cask musescore. - [EXTERNAL_DOWNLOADS]: The skill directs the agent to download and install software from external domains including lunaverus.com and musescore.org.
- [INDIRECT_PROMPT_INJECTION]: The skill implements a configuration override feature via load_override("sheet-music-preferences.md") in SKILL.md that allows user-controlled files to influence the agent's formatting and layout logic.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external audio files and their metadata as part of the transcription workflow, creating an injection surface for data-driven attacks. * Ingestion points: The sheet-music-preferences.md override file and track metadata from WAV files. * Boundary markers: None identified in the provided instructions. * Capability inventory: Shell command execution via Bash, file system modification via Write/Edit, and network access via package managers. * Sanitization: No explicit sanitization or validation of external content is described before interpolation into the agent's context.
Recommendations
- AI detected serious security threats
Audit Metadata