heartmula
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the project source code and model checkpoints from well-known platforms.
- Fetches repository:
https://github.com/HeartMuLa/heartlib.gitviagit clone. - Downloads model checkpoints from HuggingFace:
HeartMuLa/HeartMuLaGen,HeartMuLa/HeartMuLa-oss-3B-happy-new-year, andHeartMuLa/HeartCodec-oss-20260123. - [COMMAND_EXECUTION]: Installation and usage involve several shell commands.
- Uses
uvfor environment management and package installation (uv venv,uv pip install). - Uses
hffor model management. - Executes Python scripts for music generation (
python ./examples/run_music_generation.py). - [DYNAMIC_EXECUTION]: The skill instructs the user to manually patch Python source files within the cloned repository to fix dependency and compatibility issues.
- Patch 1: Modifies
modeling_heartmula.pyto re-initialize RoPE caches. - Patch 2: Modifies
music_generation.pyto addignore_mismatched_sizes=Trueto model loading calls. - [INDIRECT_PROMPT_INJECTION]: The skill processes lyrics and tags which are untrusted external inputs, creating a potential injection surface.
- Ingestion points:
--lyricsand--tagsarguments inrun_music_generation.py. - Boundary markers: None specified in the usage instructions.
- Capability inventory: The process involves model inference and file I/O within the local project directory.
- Sanitization: No explicit sanitization or validation of the input text is described.
Audit Metadata