Skills
Navigate
skills/skills-shell/superpowers/ai-music-generation/Gen Agent Trust Hub

ai-music-generation

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references installation instructions located on the inference-sh organization's GitHub repository.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted user input that is passed to a CLI tool. 1. Ingestion points: User prompts and lyrics are interpolated into shell commands via the --input flag in SKILL.md. 2. Boundary markers: The skill uses JSON objects to structure the input data, which provides a layer of separation between instructions and data. 3. Capability inventory: The skill utilizes the Bash tool to execute the belt CLI for music generation. 4. Sanitization: No explicit sanitization or filtering of user-provided strings is described in the skill instructions before they are passed to the external tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 02:20 PM
Security Audit — agent-trust-hub — ai-music-generation