suno-engineer

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform path manipulation, specifically using the dirname command to resolve album directories from track file paths.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data to construct its prompting strategy, which represents a potential injection surface.
  • Ingestion points: The agent reads the track file provided in $ARGUMENTS, the README.md file in the album directory, and the suno-preferences.md override file.
  • Boundary markers: There are no explicit instructions to use delimiters or ignore embedded instructions within the ingested data files.
  • Capability inventory: The skill has access to Read, Edit, Write, Grep, Glob, Bash, and the bitwize-music-mcp tool.
  • Sanitization: The instructions do not specify any sanitization, validation, or escaping logic for the content read from the track or album metadata files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 01:38 PM