music
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates music operations by executing the
listenhubCLI binary. It constructs command lines for tasks like song generation, track isolation, and audio splitting, using user-provided strings for prompts, lyrics, and file references. A hard-gate confirmation mechanism is enforced to prevent unauthorized execution. - [EXTERNAL_DOWNLOADS]: The skill utilizes
curlto fetch generated audio files and stem ZIP archives from remote URLs generated by the Mureka service. These downloads are saved locally to the user's working directory, following a predefined artifact naming convention. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input—including song prompts, lyrics, and media files—which creates a surface for indirect prompt injection targeting both the AI model and the local shell environment.
- Ingestion points: User-supplied text (prompts, lyrics) and media files (audio, images, video) processed by the interaction flow in SKILL.md.
- Boundary markers: A mandatory
<HARD-GATE>is implemented, requiring the agent to present all parameters to the user for explicit confirmation before any action is taken. - Capability inventory: The skill can execute subprocesses via the
listenhubCLI, perform network downloads viacurl, and manage local configuration files and music artifacts. - Sanitization: The skill uses
jqwith variable binding for configuration management to prevent injection in JSON operations. For CLI command execution, it relies on the agent platform to appropriately escape user-provided variables within shell templates.
Audit Metadata