Album Pipeline
PassAudited by ClawScan on May 10, 2026.
Overview
This is a coherent instruction-only album-production workflow, but it can run background sub-agents and local/external media-generation tools, so users should understand the scope before invoking it.
This skill appears safe to install if you want an automated AI album-production workflow. Before using it, set up trusted MiniMax CLI and media tools, run it in a dedicated project folder, and avoid providing confidential lyrics or concepts unless you are comfortable with provider-side processing.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may run ffmpeg/ffprobe and create or overwrite generated audio files during the workflow.
The skill instructs the agent to run local media-processing commands. This is expected for audio transcoding, but it does execute local binaries and writes output files.
ffmpeg -i input.mp3 -b:a 320000 -ar 44100 -y temp.mp3
Use a dedicated project folder, verify input/output paths before transcoding, and make sure ffmpeg/ffprobe are trusted installations.
Unreleased lyrics, concepts, prompts, and possibly cover/video materials may be processed by MiniMax, and provider quota or billing may be used.
The workflow sends prompts and lyrics files to the MiniMax CLI/provider for music generation. This is central to the skill’s purpose, but it crosses a provider boundary.
minimax music generate ... --lyrics-file /path/to/lyrics.txt
Do not include confidential material unless you are comfortable sending it to the generation provider; review MiniMax account, privacy, and quota settings first.
Multiple sub-agents may continue generating and editing project files after the current chat turn ends.
The root workflow explicitly uses background sub-agents after sessions_yield. This is disclosed and scoped to album-production phases, but users should notice that work continues asynchronously.
子 agent 后台工作
Invoke the skill only when you want the full pipeline to proceed, and monitor or cancel background work if the project scope changes.
The skill may fail or use whatever local tools are available if those dependencies are missing or not trusted.
The registry metadata does not declare runtime binaries, while the visible instructions reference MiniMax CLI, ffmpeg/ffprobe, and zip. This is not suspicious by itself, but setup requirements are under-declared.
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Install required tools from trusted sources and confirm versions before running the pipeline.