acestep
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local script
tools/music_gen.pyto generate music, extract stems, and manage presets. This command execution is the primary and intended function of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill identified an attack surface where user-provided prompts and lyrics are passed to the music generation engine. Given the context of music generation, this risk is assessed as safe.
- Ingestion points: Untrusted user input enters the system via the
--promptand--lyricsarguments in theSKILL.mdusage examples. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are provided for the music generation tool's input.
- Capability inventory: The skill's primary capability is executing the
tools/music_gen.pyscript and writing temporary lyric files. - Sanitization: No explicit sanitization or filtering of user input is described in the skill instructions.
Audit Metadata