music
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to interact with the
listenhubCLI, manage local configuration viajq,cat, andecho, and utilize utilities likestatfor file validation.- [EXTERNAL_DOWNLOADS]: The skill employscurlto retrieve generated music files and stem packages from remote URLs provided by the ListenHub API. These downloads are directed to the current working directory as part of the asset retrieval process.- [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection as it interpolates user-provided prompts and lyrics into shell commands and processes external media files (audio, images, video). - Ingestion points: User-supplied text fields (
prompt,lyrics) and local or remote media files (audio, video, image). - Boundary markers: The skill uses an explicit confirmation gate via the
AskUserQuestiontool before command execution and utilizes double-quoting in shell command construction. - Capability inventory: File system writes (
echo,mkdir), network downloads (curl), and CLI tool execution (listenhub). - Sanitization: Implements file extension checks and size limits (10MB) for local media files.
Audit Metadata