elevenlabs-music
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
beltCLI and supplementary agent skills from theinference-shandbelt-shGitHub organizations. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executebelt loginfor authentication andbelt app runfor music generation. These are standard operations for interacting with the referenced music generation platform. - [INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface where user-supplied text prompts are interpolated into shell commands executed by the agent.
- Ingestion points: The
promptandduration_secondsparameters defined inSKILL.mdexamples. - Boundary markers: The examples use single-quoted JSON strings to encapsulate input, but no explicit sanitization for shell metacharacters is described.
- Capability inventory: The skill uses
Bash(belt *)which allows shell execution. - Sanitization: Absent; the skill relies on the agent to correctly format the CLI call.
Audit Metadata