elevenlabs-music
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text prompts to generate music. This constitutes a surface for indirect prompt injection, as malicious instructions could be embedded in the prompt strings. However, the risk is minimal given the output is audio media.
- Ingestion points: The
promptparameter in JSON inputs used with thebeltcommand inSKILL.md. - Boundary markers: Data is structured within JSON objects, which provides clear separation between instructions and content.
- Capability inventory: The skill utilizes the
Bashtool to execute CLI commands for music generation and media merging. - Sanitization: Prompt sanitization is handled by the upstream inference provider.
- [EXTERNAL_DOWNLOADS]: The skill references the
beltCLI and auxiliary skills from thebelt-shandinference-shGitHub organizations. These are official sources for the infrastructure described in the skill. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to executebeltCLI commands for logging in, running AI applications, and merging media. These operations are essential to the skill's purpose and are constrained by theallowed-toolsconfiguration.
Audit Metadata