create-music-elevenlabs

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The code intentionally transmits user-provided prompts and diagnostic payloads to a remote api_base (via gw_log and proxy requests), which is deliberate telemetry/exfiltration of potentially sensitive input.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Outsider-authored free text is ingested at runtime only as the user-supplied --prompt passed to scripts/gen_music.py, which is then forwarded as JSON {"prompt": prompt} in media_proxy.eleven_music to the ElevenLabs proxy; the workflow does not monitor or automatically read from public feeds or queues.