Security audit
Al Music Generation
Security checks across malware telemetry and agentic risk
Overview
This skill is a coherent ShortAPI music-generation helper that uses a ShortAPI key, sends generation prompts to ShortAPI, and polls briefly for results without hidden installation or persistence.
Install this only if you are comfortable sending prompts, lyrics, and job metadata to ShortAPI. Keep SHORTAPI_KEY in the environment, do not put secrets in prompts or callback URLs, and ensure any agent using the skill respects the documented 5-minute polling limit and URL sanitization rules before rendering media inline.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.