music-get
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill functions by ingesting data from external tool outputs and local memory caches, which represents a potential attack surface for indirect prompt injection if the retrieved metadata contains malicious instructions.
- Ingestion points: Untrusted data enters the agent context through the outputs of the
mcp__cogmusic__get_productiontool and themusic-productionsmemory namespace. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the skill definition.
- Capability inventory: The skill's primary capabilities involve reading from memory and fetching metadata; it does not explicitly call dangerous system commands or perform network exfiltration in its own logic.
- Sanitization: There is no evidence of validation or sanitization of the retrieved metadata fields (such as title or prompt) before they are processed by the agent.
Audit Metadata