Music Generation
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone using the skill must provide a SenseAudio API key, which may allow song-generation requests under their account.
The skill needs a SenseAudio bearer token to authenticate API calls. This is disclosed and expected for the integration, but the key authorizes actions permitted by that SenseAudio account.
requires:\n env:\n - SENSEAUDIO_API_KEY ... Auth: Authorization: Bearer $SENSEAUDIO_API_KEY
Use a dedicated, revocable API key if possible, monitor usage, and avoid copying the Python example in a way that hardcodes a real key into shared files.
Prompts, lyrics, titles, style choices, and generated-task metadata may be transmitted to the external SenseAudio service.
The documented workflow sends prompts and lyrics to an external provider endpoint. This is central to the skill's purpose, but it means user-provided text is shared with SenseAudio.
Base URL: https://api.senseaudio.cn ... prompt | string | yes | Description of the lyrics to generate ... lyrics | string | no | Song lyrics
Do not submit confidential or sensitive lyrics/prompts unless you are comfortable with SenseAudio's data handling terms.