Suno Browser Songmaking

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may create songs and retrieve links using the user's Suno account session.

Why it was flagged

The skill may act through the user's logged-in Suno browser session. This is expected for Suno automation, but users should understand it uses their account context.

Skill content
Prefer Chrome relay if the user is already logged in. Otherwise use the isolated OpenClaw browser and ask for login if needed.
Recommendation

Use an isolated browser when possible, confirm the Suno account being used, and review before generating or sharing outputs.

What this means

The agent can submit prompts and generate new tracks in Suno on the user's behalf.

Why it was flagged

The skill instructs browser actions that create new content in Suno. This is central to the stated purpose, but it is still a user-account mutation that should remain user-directed.

Skill content
Paste lyrics and style tags. Generate and wait for completion.
Recommendation

Confirm the final lyrics, style tags, persona, and title before allowing the agent to click Generate.

NoteMedium Confidence
ASI01: Agent Goal Hijack
What this means

If followed too literally, the agent might make the wrong song rather than the one the user requested.

Why it was flagged

The reference includes a fixed example workflow that could conflict with a user's actual requested persona, title, or style if treated as universally applicable.

Skill content
## Exact runbook (Anchor Protocol run) ... select Kara Codex ... Set Song Title to: `Anchor Protocol`.
Recommendation

Treat the 'Anchor Protocol' steps as an example or prior runbook, and follow the user's current brief unless they explicitly request those values.