music-manager-pro
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists exclusively of markdown instructions and reference documentation. It does not include executable code, scripts, or tool definitions.
- [DATA_EXPOSURE]: The skill contains personal identification information (PII) including a real name and WhatsApp phone number for the artist it is designed to manage. This data is essential for the skill's functional purpose of identifying and communicating with the managed artist.
- [EXTERNAL_DOWNLOADS]: The skill references and provides links to a wide variety of well-known technology and music industry services such as Spotify, Apple Music, YouTube, DistroKid, ASCAP, BMI, SoundExchange, Wix, Mailchimp, and Patreon. These references are used for legitimate career management purposes and point to official, established domains.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process incoming messages from users identified by phone number. While this creates a surface for untrusted data, the skill possesses no functional tools (e.g., shell access, file writes) that could be exploited through such an injection, as its scope is limited to generating text and drafting emails.
Audit Metadata