audiocraft-audio-generation
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include installing the
audiocraftlibrary from the official Meta GitHub repository (facebookresearch/audiocraft). This is a legitimate source and represents standard practice for using open-source research models.\n- [COMMAND_EXECUTION]: The troubleshooting documentation provides standard system administration commands such assudo apt-get install ffmpegto install necessary audio backend dependencies. These commands are typical for the skill's primary purpose and do not suggest malicious intent.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided text descriptions to generate audio, creating a potential surface for indirect prompt injection.\n - Ingestion points: User-supplied text prompts via the
generateandgenerate_with_chromamethods inSKILL.mdandadvanced-usage.md.\n - Boundary markers: Absent; prompts are interpolated directly into model calls.\n
- Capability inventory: The skill environment includes file system writing via
torchaudio.saveandscipy.io.wavfile.write, as well as package installation viapip.\n - Sanitization: No explicit sanitization or filtering of prompt text is implemented.
Audit Metadata