ai-music-generation

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches installation guidelines and documentation from the official GitHub repository for the inference.sh service (inference-sh/skills).
  • [COMMAND_EXECUTION]: Executes music generation tasks using the 'belt' CLI tool. The skill utilizes platform configuration to restrict the agent's tool access exclusively to this specific command, minimizing risk.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied prompts and lyrics that are passed to external generative models via shell commands. 1. Ingestion points: Prompt and lyric values in JSON inputs for the 'belt' command (SKILL.md). 2. Boundary markers: Not present in example usage. 3. Capability inventory: Execution of the 'belt' CLI via bash. 4. Sanitization: Not explicitly defined; relies on standard parameter handling by the agent's shell interface.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 10:39 PM
Security Audit — agent-trust-hub — ai-music-generation