Evolink Music — AI Music Generation (Suno v4/v4.5/v5)
ReviewAudited by ClawScan on May 1, 2026.
Overview
This is a coherent music-generation skill, with expected notes around using an Evolink API key, sending prompts/audio to Evolink, and running an unpinned npm MCP server.
Install if you are comfortable using Evolink for music generation. Before use, verify or pin the MCP npm package, keep EVOLINK_API_KEY private, confirm cost-sensitive generations, and only upload audio or lyrics you are willing to send to Evolink.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A future or compromised package release could affect the local MCP server behavior and would likely receive the Evolink API key during use.
The setup instructions run an external npm MCP server using @latest, which is purpose-aligned but unpinned and will execute code from the package registry.
mcporter call --stdio "npx -y @evolinkai/evolink-media@latest" list_models
Verify the npm/GitHub package source before use and pin a specific trusted version instead of using @latest where possible.
Anyone or any tool with this key may be able to use the account's Evolink capabilities and credits.
The skill requires an account API key that authorizes Evolink API calls, which is expected for this integration but still sensitive.
`EVOLINK_API_KEY` authenticates all requests. Injected by OpenClaw automatically. Treat as confidential.
Use a dedicated, revocable API key, avoid sharing it in prompts or logs, and rotate it if exposure is suspected.
Prompts, lyrics, and uploaded audio may be processed and temporarily hosted by Evolink, so sensitive or private content should be shared only intentionally.
The skill clearly discloses that user prompts and audio leave the local environment for processing and temporary hosting.
Prompts and audio are sent to `api.evolink.ai`. Uploaded files expire in **72h**, result URLs in **24h**.
Upload only files you intend to send to Evolink, delete hosted files when no longer needed, and save result URLs promptly before they expire.
Generating music may spend Evolink credits, and file-management tools can upload or delete hosted audio files.
Music generation is an account-affecting action because completed or submitted tasks can reserve or charge credits.
`usage.credits_reserved` | number | Credits charged for this task
Confirm the desired model, duration, and cost before generation, and confirm before deleting hosted files.