validate-album
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform environment and file system checks, such as verifying directory existence (test -d) and listing files (ls). These commands are used for structural validation and path discovery. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from local album files, which could theoretically contain malicious instructions.
- Ingestion points: The agent reads the content of
README.mdand track markdown files located in{album_path}/tracks/to extract status and metadata fields. - Boundary markers: There are no explicit delimiters or specific instructions provided to the model to ignore potential commands embedded within the track files or README content.
- Capability inventory: The skill possesses the ability to execute
Bashcommands and use thebitwize-music-mcptoolset based on findings from the ingested files. - Sanitization: No explicit sanitization or validation of the text content within the track files is performed before the model interpolates it for status checking and synchronization logic.
Audit Metadata