music
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a structured workflow for generating instrumental music and vocal songs using an internal tool. It contains specific instructions to avoid duplicating lyrics, imitating named artists, or using copyrighted recordings, which aligns with security and ethical best practices.
- [INDIRECT_PROMPT_INJECTION]: The skill contains logic for ingesting untrusted user data via the
lyricsandpromptfields inSKILL.mdandreferences/song.md. - Ingestion points: User-supplied lyrics and style descriptions are processed by the
submit_musictool. - Boundary markers: The instructions recommend using structure markers like
[Verse]and[Chorus]to delimit content. - Capability inventory: The skill uses
submit_musicfor audio generation andtrack_progressfor status monitoring; no direct file system writes or arbitrary network operations are performed by the skill logic itself. - Sanitization: The skill instructs the agent to preserve user lyrics as-is and seek approval for drafted lyrics, relying on the underlying generation tool's internal safety filters for the generated audio output.
Audit Metadata