Music Generation

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only SenseAudio music-generation API skill, with expected use of a declared API key and external prompt/lyrics submission.

This appears safe to install if you intend to use SenseAudio music generation. Provide only an API key you are willing to use for this service, avoid hardcoding real keys in copied examples, and avoid sending confidential lyrics or prompts unless you accept the provider's privacy and retention practices.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone using the skill must provide a SenseAudio API key, which may allow song-generation requests under their account.

Why it was flagged

The skill needs a SenseAudio bearer token to authenticate API calls. This is disclosed and expected for the integration, but the key authorizes actions permitted by that SenseAudio account.

Skill content
requires:\n  env:\n    - SENSEAUDIO_API_KEY ... Auth: Authorization: Bearer $SENSEAUDIO_API_KEY
Recommendation

Use a dedicated, revocable API key if possible, monitor usage, and avoid copying the Python example in a way that hardcodes a real key into shared files.

What this means

Prompts, lyrics, titles, style choices, and generated-task metadata may be transmitted to the external SenseAudio service.

Why it was flagged

The documented workflow sends prompts and lyrics to an external provider endpoint. This is central to the skill's purpose, but it means user-provided text is shared with SenseAudio.

Skill content
Base URL: https://api.senseaudio.cn ... prompt | string | yes | Description of the lyrics to generate ... lyrics | string | no | Song lyrics
Recommendation

Do not submit confidential or sensitive lyrics/prompts unless you are comfortable with SenseAudio's data handling terms.