Security audit
Security checks for vulnerabilities and agentic risk
ClawScan rates this music-creation skill suspicious with medium confidence, mainly because it flags guidance that could risk system-wide memory exhaustion and use of an unidentified music CLI without a data-sharing disclosure; inspection was incomplete.
Consider the suspicious Review rating before installing. The scan reports missing disclosure and consent around a generic CLI and a memory-cap override that could affect the whole machine. Coverage was partial: 32 of 35 components were fully inspected, three were partial, and several analyzers were degraded, so the results are incomplete and do not establish that the skill is safe.
Referenced artifact was not completely inspected
re-tags.md`](references/structure-tags.md) and [`references/lyrics-cleanup.md`](references/lyrics-cleanup.md).
Referenced artifact was not completely inspected
- [`references/lyrics-cleanup.md`](references/lyrics-cleanup.md) — cleanup recipe for Whisper/ASR transcripts, canonical section tags, `info.txt`, and `lyrics_w
Referenced artifact was not completely inspected
- [`references/lrc-generation.md`](references/lrc-generation.md) — backend-neutral LRC (synced lyrics) workflow: WhisperX/Whisper transcription → lyrics alignme
Without declared permissions the skill's intent is opaque and cannot be validated.
The guide provides a runnable configuration that disables the MPS allocation limit while recommending workloads that can exhaust shared system memory. Although it discusses memory pressure and swap thrashing, it does not clearly warn at this step that disabling the limit can make the entire machine unresponsive or require explicit acceptance of that risk; its contradictory tier guidance further weakens the memory checks.
The smoke-test rule explicitly requires English section tags and treats non-English equivalents as a hard failure. It does not offer a language choice or explain why a particular backend requires these English tokens.
The generic fallback directs the agent to use any detected music CLI with prompts and potentially lyrics without first establishing whether it runs locally or uploads inputs. Unlike the Stable Audio section, this branch has no disclosure or consent gate, allowing private creative material to reach an unidentified cloud service or incur charges without informed approval.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
print(json.dumps({"status": "error", "error": "ffmpeg not found on PATH"}, indent=2), file=sys.stderr)
return 1
print("WARNING: ffmpeg amix is preview-quality, not DAW-quality mixing.", file=sys.stderr)
return subprocess.run([ffmpeg, *command[1:]], shell=False, check=False).returncode
if __name__ == "__main__":
Code issues a request to a loopback, link-local, or private-range host. This can reach internal services not meant to be exposed and is a common SSRF pivot.
proxies = [h.proxies for h in opener.handlers if isinstance(h, urllib.request.ProxyHandler) and h.proxies]
assert not proxies, f"proxies must be disabled, found {proxies}"
# Offline check: no network call is made; the handler is invoked directly.
request = urllib.request.Request("http://127.0.0.1:8001/health")
try:
module._RejectRedirects().redirect_request(request, None, 302, "Found", {}, "http://example.com/")
except urllib.error.HTTPError as exc:
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
if ffprobe is None or not path.is_file():
return None
try:
completed = subprocess.run(
[ffprobe, "-v", "error", "-show_entries", "format=duration", "-of", "csv=p=0", str(path)],
capture_output=True,
text=True,
L007–L010 state that, with --expected-seconds, a cache file only counts after its measured duration is within tolerance. However, L077–L079 classify probe failures as unverified, and L158–L167 treat those files as usable and immediately stop waiting with succeeded_unverified. Although main returns a nonzero exit status for that state, the helper still stops before the documented duration condition is met, potentially selecting an in-progress intermediate.
The instruction loads this reference whenever a request mentions shift or turbo, without explicitly requiring an ACE-Step music-generation context. These terms also occur in unrelated requests, such as work-shift scheduling, potentially causing unintended reference loading.