Security audit
Apidot Generate Music Api
Security checks for vulnerabilities and agentic risk
Overview
This is a documentation-only APIDot music API helper with disclosed API-key guidance and no executable behavior.
Before installing, users should be comfortable that the skill points agents to APIDot documentation and may help plan API usage. Keep any APIDot API key in server-side secrets only, review current APIDot docs and pricing before making calls, and avoid logging private prompts, callback URLs, webhook payloads, or generated audio URLs.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.