mm-music-maker
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied lyrics and style prompts in
scripts/generate_music.py, which are then transmitted to the MiniMax API. This constitutes a standard data ingestion surface for AI-based generation tools. The skill relies on the downstream API provider to handle content safety, which is appropriate for this use case. - [DATA_EXFILTRATION]: Network operations are restricted to the official MiniMax API endpoint at
api.minimaxi.com. The skill transmits user prompts and lyrics to this service and facilitates the download of generated audio files, which aligns with its primary functionality. - [COMMAND_EXECUTION]: The documentation provides command-line interface (CLI) examples for running the generation scripts. These examples use standard argument parsing and do not introduce shell injection risks or excessive privileges.
- [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage sensitive API keys via environment variables (
MINIMAX_MUSIC_API_KEY), avoiding hardcoded secrets within the codebase or instructions.
Audit Metadata