alterlab-genai-soundtrack-composer
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is configured to ingest and process external information from web searches and local project files, creating a vulnerability surface for indirect prompt injection.- Ingestion points: The agent is instructed to read local project files (such as scripts, video edits, and prior cue sheets) and search the web for Suno updates and licensing terms.- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when processing external data.- Capability inventory: The skill possesses file-reading, web-searching, and file-writing capabilities (e.g., writing cue sheets and catalogs to the project directory).- Sanitization: There are no mentions of sanitizing, escaping, or validating the content retrieved from external files or the internet.
Audit Metadata