creativeclaw-generate-sound-effects

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill configuration in agents/openai.yaml specifies a connection to an MCP server at app.creativeclaw.co. This is a vendor-owned domain belonging to the skill's author, used to provide the necessary tool capabilities.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill processes natural language prompts from users to describe desired sound effects, which are passed to the generate_sound_effect tool as detailed in SKILL.md.
  • Boundary markers: The instructions provide creative guidance on prompt construction (e.g., source, material, acoustic space) but do not implement specific technical delimiters to isolate user-supplied strings from the tool's internal instructions.
  • Capability inventory: The toolset includes generative audio capabilities and media assembly functions (merging audio and video) through the creative-claw server.
  • Sanitization: There is no mention of automated filtering or sanitization of user prompts before they are processed by the generative model.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 05:35 AM