music
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-supplied text prompts to generate music, which creates a surface for indirect prompt injection attacks.\n
- Ingestion points: The
promptparameter in themusic.compose,music.composition_plan.create, andmusic.compose_detailedmethods acrossSKILL.mdandreferences/api_reference.mdserves as the entry point for untrusted data.\n - Boundary markers: No explicit delimiters or instructions to the model to ignore embedded commands are included in the provided code snippets.\n
- Capability inventory: The skill facilitates network communication with
api.elevenlabs.ioand file system operations to write audio files (e.g.,output.mp3).\n - Sanitization: The provided examples do not demonstrate sanitization or validation of the input prompt strings before they are sent to the API.\n- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official ElevenLabs client libraries from standard package registries.\n
- Evidence:
references/installation.mdspecifies the installation of theelevenlabsPython package and the@elevenlabs/elevenlabs-jsNode.js package.
Audit Metadata