ai-music-generation
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides links to installation instructions and documentation hosted on the official GitHub repository for
inference-shand the platform's primary domain. These resources are standard for setting up the required CLI environment for the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where user-supplied text (such as song prompts and lyrics) is passed to the
beltCLI for processing by AI models. - Ingestion points: User-provided strings enter the context through the
promptandlyricsfields in the JSON input for thebelt app runcommand inSKILL.md. - Boundary markers: The input is structured within JSON payloads, which provides a technical boundary between user data and command parameters, though there are no instructions for the agent to use specific delimiters to prevent the underlying music model from following instructions embedded in the prompt.
- Capability inventory: The skill is scoped to the
beltCLI tool, which is used specifically for interacting with remote inference APIs for audio generation. - Sanitization: No explicit sanitization or filtering of the user-provided prompt is performed within the skill; the system relies on the platform's API-side safety guardrails for the generated content.
Audit Metadata