add-audio
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it is designed to read and process external source code files (e.g.,
src/core/EventBus.js, scene files) to identify game events. This untrusted content is then used to influence the generation of new audio code and modifications to the project. - Ingestion points: The agent is instructed to read local game files at
$ARGUMENTSor the current directory. - Boundary markers: No specific boundary markers or instruction-following constraints are defined for the reading of external source files.
- Capability inventory: The skill allows the agent to create new files (
src/audio/AudioManager.js,src/audio/AudioBridge.js,src/audio/music.js,src/audio/sfx.js) and modify existing application logic (EventBus.js,main.js). - Sanitization: No explicit sanitization or validation of the ingested code is specified, relying on the agent's interpretation of the game logic.
Audit Metadata