Trust Assessment
elevenlabs-music received a trust score of 81/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Arbitrary File Write via User-Controlled Path, Unpinned Dependency in Skill Requirements.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Arbitrary File Write via User-Controlled Path The skill allows users to specify an arbitrary output file path via the `-o` or `--output` argument. This can lead to an attacker overwriting critical system files, writing to sensitive directories, or consuming disk space if the agent's execution context has sufficient write permissions. While the default path is `/tmp/music.mp3`, the ability to override it poses a significant risk. Implement strict validation and sanitization for the `output_path` argument. Restrict output paths to a designated, sandboxed directory (e.g., a subdirectory within the skill's working directory or a temporary directory managed by the agent). Do not allow absolute paths or paths containing directory traversal sequences (e.g., `../`). | LLM | scripts/generate_music.py:80 | |
| MEDIUM | Unpinned Dependency in Skill Requirements The `python-dotenv` dependency is specified without a version constraint in the `dependencies` list. This means that any future version of `python-dotenv` could be installed, potentially introducing breaking changes, vulnerabilities, or even malicious code if a supply chain attack were to occur against the package. It's best practice to pin dependencies to specific versions or a narrow range. Pin the `python-dotenv` dependency to a specific version (e.g., `python-dotenv==1.0.0`) or a compatible version range (e.g., `python-dotenv~=1.0.0`) to ensure deterministic builds and mitigate risks from future package updates. | LLM | scripts/generate_music.py:5 |
Scan History
Embed Code
[](https://skillshield.io/report/5346a920b914a937)
Powered by SkillShield