elevenlabs-music
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches guidelines and installation instructions from the official inference-sh GitHub repository.
- [COMMAND_EXECUTION]: The skill uses the
beltCLI to interact with the ElevenLabs music generation API and perform tasks like user authentication and app execution. - [INDIRECT_PROMPT_INJECTION]: The skill takes user-provided text prompts as input for music generation, which represents a standard surface for processing untrusted data.
- Ingestion points: Untrusted data enters via the
promptparameter in thebelt app runcommands withinSKILL.mdexamples. - Boundary markers: The instructions use JSON formatting (
--input '{"prompt": "..."}') to structure inputs, providing clear delimiters between parameters. - Capability inventory: The skill uses the
Bashtool to executebeltCLI commands and perform network-based API calls to the vendor's platform. - Sanitization: The skill relies on the
beltCLI's internal handling of JSON-structured arguments to prevent command injection at the shell level.
Audit Metadata