ClawHub
Back to skill

Security audit

Suno AI 音乐提示词专家

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only music prompt helper with no executable code, permissions, credential use, persistence, or hidden data flow.

Install only if you want the assistant to provide structured Suno music prompt advice when related keywords come up. Expect generated prompts to be in English and explanations mainly in Chinese; review any copyright-sensitive style references before using them.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The trigger set includes very generic terms such as "Suno," "music prompt," and "AI作曲," which can match ordinary conversation and cause the skill to activate unexpectedly. This can lead to unwanted context injection or the skill steering responses when the user did not explicitly request it, though the skill itself appears informational rather than directly harmful.

Natural-Language Policy Violations

Medium
Confidence
82% confidence
Finding
The README states the skill helps construct English prompts directly, which may bias the agent into producing English output regardless of the user's language preference or explicit request. While not a classic security flaw, it can override user intent and reduce trust by unexpectedly changing output language or causing prompt content to be generated in a less accessible form.

Static analysis

No suspicious patterns detected.