audiocraft-audio-generation
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
audiocraftlibrary from a public repository hosted by Meta, along with other standard machine learning packages such asdora-search,transformers, andtorch.\n- [COMMAND_EXECUTION]: The provided documentation includes shell commands for package management and environment setup, including instructions for system-level installation of FFmpeg usingsudoin the troubleshooting section.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides examples of systems that process text-based descriptions to generate audio, creating a potential attack surface for indirect prompt injection.\n - Ingestion points: Text descriptions are ingested via prompt strings in the Python generation methods and through user-facing input fields in the Gradio and FastAPI deployment examples.\n
- Boundary markers: The code snippets do not include explicit delimiters or safety instructions to separate untrusted user input from the model's generation context.\n
- Capability inventory: The skill demonstrates the ability to write generated content to the file system using the
torchaudioandscipylibraries.\n - Sanitization: No input validation, filtering, or sanitization of the provided prompt strings is implemented in the instructional examples.
Audit Metadata