Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ai Music Generation

v0.1.5

Generate AI music and songs with Diffrythm, Tencent Song Generation via inference.sh CLI. Models: Diffrythm (fast song generation), Tencent Song Generation (...

0· 1.5k·7 current·8 all-time
byÖmer Karışman@okaris
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, description, and runtime examples consistently target running the inference.sh CLI to generate music (Diffrythm, Tencent Song). No unrelated services, binaries, or credentials are requested.
Instruction Scope
Runtime instructions are focused on using the infsh CLI and example app runs. However, the Quick Start includes a curl | sh install pipeline and a suggested infsh login step; these steps reach out to the inference.sh platform and request authentication, which expands the surface beyond local-only operations.
!
Install Mechanism
The SKILL.md instructs users to run `curl -fsSL https://cli.inference.sh | sh`, which downloads and executes a remote script directly — a high-risk pattern. While the doc points to dist.inference.sh checksums for verification, piping to sh executes code before a user must manually verify, and the skill provides no automated, auditable install spec. This is disproportionate to an instruction-only skill and increases risk.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The examples do include an `infsh login` step (which implies authenticating to inference.sh), but this is consistent with using a hosted CLI service; no unrelated secrets are requested by the skill itself.
Persistence & Privilege
The skill is not marked always:true and does not request to modify other skills or system-wide settings. It's instruction-only and does not request elevated platform privileges.
What to consider before installing
This skill appears to be what it says (it uses inference.sh to generate music), but be careful about the install instruction. Avoid blindly running `curl | sh` from the internet: instead, manually download the installer script, inspect its contents, verify the SHA-256 checksums from the provided URL, or prefer installing from a trusted package manager or vendor-signed release. Understand that `infsh login` will authenticate you to a remote service and that prompts/inputs may be transmitted to inference.sh. If you must install, do so in an isolated environment (VM/container) and review inference.sh's privacy/terms to confirm how they handle uploaded prompts, audio, and any generated content. If you want a lower-risk alternative, ask the skill author for an install manifest (e.g., a package manager formula or explicit, auditable steps) or a checksum-verified download link with verification instructions that don't rely on piping to a shell.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a97y9mszmtk5f76xqdbktn981c0rc
1.5kdownloads
0stars
2versions
Updated 6m ago
v0.1.5
MIT-0

AI Music Generation

Generate music and songs via inference.sh CLI.

AI Music Generation

Quick Start

# Install CLI
curl -fsSL https://cli.inference.sh | sh && infsh login

# Generate a song
infsh app run infsh/diffrythm --input '{"prompt": "upbeat electronic dance track"}'

Install note: The install script only detects your OS/architecture, downloads the matching binary from dist.inference.sh, and verifies its SHA-256 checksum. No elevated permissions or background processes. Manual install & verification available.

Available Models

ModelApp IDBest For
Diffrythminfsh/diffrythmFast song generation
Tencent Songinfsh/tencent-song-generationFull songs with vocals

Browse Audio Apps

infsh app list --category audio

Examples

Instrumental Track

infsh app run infsh/diffrythm --input '{
  "prompt": "cinematic orchestral soundtrack, epic and dramatic"
}'

Song with Vocals

infsh app sample infsh/tencent-song-generation --save input.json

# Edit input.json:
# {
#   "prompt": "pop song about summer love",
#   "lyrics": "Walking on the beach with you..."
# }

infsh app run infsh/tencent-song-generation --input input.json

Background Music for Video

infsh app run infsh/diffrythm --input '{
  "prompt": "calm lo-fi hip hop beat, study music, relaxing"
}'

Podcast Intro

infsh app run infsh/diffrythm --input '{
  "prompt": "short podcast intro jingle, professional, tech themed, 10 seconds"
}'

Game Soundtrack

infsh app run infsh/diffrythm --input '{
  "prompt": "retro 8-bit video game music, adventure theme, chiptune"
}'

Prompt Tips

Genre keywords: pop, rock, electronic, jazz, classical, hip-hop, lo-fi, ambient, orchestral

Mood keywords: happy, sad, energetic, calm, dramatic, epic, mysterious, uplifting

Instrument keywords: piano, guitar, synth, drums, strings, brass, choir

Structure keywords: intro, verse, chorus, bridge, outro, loop

Use Cases

  • Social Media: Background music for videos
  • Podcasts: Intro/outro jingles
  • Games: Soundtracks and effects
  • Videos: Background scores
  • Ads: Commercial jingles
  • Content Creation: Royalty-free music

Related Skills

# Full platform skill (all 150+ apps)
npx skills add inference-sh/skills@inference-sh

# Text-to-speech
npx skills add inference-sh/skills@text-to-speech

# Video generation (add music to videos)
npx skills add inference-sh/skills@ai-video-generation

# Speech-to-text
npx skills add inference-sh/skills@speech-to-text

Browse all apps: infsh app list

Documentation

Comments

Loading comments...