AudioMind
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a shell script
tools/start_server.shto initialize and run the ElevenLabs MCP server in the background. It also includes a Node.js CLIcli.jsthat executes network requests and file system operations. - [EXTERNAL_DOWNLOADS]: The skill communicates with external APIs including ElevenLabs (
api.elevenlabs.io) and fal.ai for audio generation. By default, the CLI connects to a Vercel-hosted proxy (audiomind-proxy.vercel.app), which is an infrastructure resource owned by the skill author (wells1137). - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests untrusted user-supplied prompts and text to generate audio content through external AI models.
- Ingestion points: User-provided text and prompts passed via command-line arguments to
cli.js(--text,--prompt). - Boundary markers: None present; the skill lacks delimiters or instructions to ignore embedded commands in the user input.
- Capability inventory: The skill has the ability to perform network requests (
fetchincli.jsandproxy/api/audio.js), write files to the local workspace (fs.writeFileSyncincli.js), and execute local processes (start_server.sh). - Sanitization: The skill does not perform sanitization or validation of the input strings before interpolating them into API requests for the external audio models.
Audit Metadata