suno-produce
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes allowed
Bashtools to manage local files and execute a dedicated Python validation script. - Evidence:
- In
steps/create.mdandsteps/revise.md, the skill executespython3 "$SKILL_DIR"/scripts/validate.pyto check the validity of generated prompts. - It uses
mkdir,cp, andmvcommands to organize project directories (tracks/,versions/) and archive previous iterations ofTRACK.mdfiles. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted user data in the form of music briefs and feedback to synthesize prompt artifacts.
- Ingestion points: The
createsubcommand takes a<brief>argument, and therevisesubcommand takes a<feedback>argument, both of which are free-text inputs provided by the user in the$ARGUMENTSfield ofSKILL.md. - Boundary markers: The generated prompts are encapsulated within
TRACK.mdusing triple-backtick fences (e.g.,```text ... ```) to separate the prompt content from the rest of the documentation. - Capability inventory: The skill possesses the ability to write files to the local file system and execute the local
scripts/validate.pyscript using the Python 3 interpreter via theBashtool. - Sanitization: The skill employs a deterministic linter (
scripts/validate.py) that strictly enforces character limits and utilizes regular expressions to detect and block artist citation patterns (e.g., "in the style of..."). This prevents the generation of prompts that might trigger safety filters or create legal risks.
Audit Metadata