Security audit
suno
Security checks across malware telemetry and agentic risk
Overview
This skill gives clear, purpose-matched instructions for using RunAPI's Suno service to generate or process music, with appropriate authentication and verification guardrails.
Before installing, consider that using this skill can send prompts and selected local media files to RunAPI/Suno and may create paid generation tasks. Provide a RunAPI API key only when you trust the environment, and review generated request files before submission for sensitive content.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
1/64 vendors flagged this skill as malicious, and 63/64 flagged it as clean.
Static analysis
No suspicious patterns detected.