beat-sync
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and process data returned by the
audio_inspecttool, such as BPM and beat markers, which constitutes an external data ingestion surface. - Ingestion points: Data from
audio_inspectresults (bpm, beatOffset, beatTimes, downbeatTimes) are used to drive timeline actions inSKILL.md. - Boundary markers: The instructions do not specify explicit delimiters or warnings to ignore embedded instructions in the audio metadata.
- Capability inventory: The skill utilizes video editing capabilities including
addMarkers,sliceClip,snapToBeat,setKeyframeTrack,applyCameraShake,addEffect, andapplyMotionPreset. - Sanitization: There is no mention of sanitizing or validating the technical metadata received from the audio analysis tool.
Audit Metadata