stable-audio-2.5

• Outcome: Pass
• Latest audit: Sep 3, 2026 · 3:28 PM UTC
• Version: 1.0.11

Overview

This is a coherent background-music generation skill that uses Replicate as disclosed, with ordinary caution needed for remote prerequisite installs and API prompt sharing.

Before installing, review any npx skills add command because it can add or update skills from a remote repository, especially the optional full-suite install. When using the skill, do not put secrets or sensitive private content in audio prompts because prompts are sent to Replicate with your API token.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (12)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The description says the skill should be used when someone wants 'light instrumental background music,' which is a broad natural-language condition that could match many everyday media or editing requests. It does not provide explicit trigger phrases, boundaries, or negative examples in the activation description itself, increasing the chance of unintended invocation.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence
• Finding: The skill instructs users to execute `npx skills add ...` without pinning an exact version or immutable reference. This creates a supply-chain risk: a later malicious or compromised package release could be fetched and executed automatically in the user's environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence
• Finding: The skill instructs users to execute `npx skills add ...` without pinning an exact version or immutable reference. This creates a supply-chain risk: a later malicious or compromised package release could be fetched and executed automatically in the user's environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence
• Finding: The skill instructs users to execute `npx skills add ...` without pinning an exact version or immutable reference. This creates a supply-chain risk: a later malicious or compromised package release could be fetched and executed automatically in the user's environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence
• Finding: The skill instructs users to execute `npx skills add ...` without pinning an exact version or immutable reference. This creates a supply-chain risk: a later malicious or compromised package release could be fetched and executed automatically in the user's environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence
• Finding: The skill instructs users to execute `npx skills add ...` without pinning an exact version or immutable reference. This creates a supply-chain risk: a later malicious or compromised package release could be fetched and executed automatically in the user's environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence
• Finding: The skill instructs users to execute `npx skills add ...` without pinning an exact version or immutable reference. This creates a supply-chain risk: a later malicious or compromised package release could be fetched and executed automatically in the user's environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence
• Finding: The skill instructs users to execute `npx skills add ...` without pinning an exact version or immutable reference. This creates a supply-chain risk: a later malicious or compromised package release could be fetched and executed automatically in the user's environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence
• Finding: The skill instructs users to execute `npx skills add ...` without pinning an exact version or immutable reference. This creates a supply-chain risk: a later malicious or compromised package release could be fetched and executed automatically in the user's environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence
• Finding: The skill instructs users to execute `npx skills add ...` without pinning an exact version or immutable reference. This creates a supply-chain risk: a later malicious or compromised package release could be fetched and executed automatically in the user's environment.

External Transmission

Medium

• Category: Data Exfiltration

Content

## HTTP (curl)

```bash
curl -s -X POST \
  -H "Authorization: Bearer ${REPLICATE_API_TOKEN}" \
  -H "Content-Type: application/json" \
  -d '{

• Confidence: 60% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

"cfg_scale": 1
    }
  }' \
  "https://api.replicate.com/v1/models/stability-ai/stable-audio-2.5/predictions"
```

Poll `urls.get` until `status` is `succeeded`; download `output` MP3.

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

VirusTotal

59/59 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.