ClawHub

Songmaker

v1.0.0

Generate a complete song from a text description — AI writes lyrics then composes music. Use when users want to create a song, turn a description into audio,...

⭐ 0· 174·1 current·1 all-time
by@scikkk
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (song generation) match the declared requirements: SENSEAUDIO_API_KEY and the use of senseaudio.cn API endpoints. Required binaries (curl, jq) are appropriate for the provided bash examples.
✓
Instruction Scope
SKILL.md contains concrete curl/jq examples that call senseaudio.cn endpoints to generate lyrics and music and then poll task endpoints. It does not instruct reading unrelated files, other env vars, or sending data to third-party endpoints beyond the provider. It asks to show lyrics to the user for confirmation before proceeding.
✓
Install Mechanism
No install spec or downloads — instruction-only skill. Nothing is written to disk by the skill itself beyond what the agent normally does when following the provided shell commands.
✓
Credentials
Only a single API credential (SENSEAUDIO_API_KEY) is required and declared as primaryEnv. The key is consistent with the described provider and used in all example requests. No unrelated credentials or broad config paths are requested.
✓
Persistence & Privilege
always:false (default), and the skill does not request elevated or persistent system-wide privileges. Autonomous invocation is allowed by platform default but not combined with other red flags.
Assessment
This skill appears internally consistent, but before installing: (1) Verify you trust the provider (https://senseaudio.cn) because your SENSEAUDIO_API_KEY will be sent to their API and may incur costs or expose usage metadata. (2) Treat the API key as a secret—do not reuse a high-privilege key you rely on elsewhere; create a scoped key if the provider supports it and be ready to revoke it. (3) Review the provider's privacy/terms for uploaded text/audio and any retention or licensing of generated content. (4) Because the skill runs shell commands using curl, ensure the agent environment is isolated from sensitive networks/credentials. (5) If you need higher assurance, request source code or an official SDK/verification from the publisher before granting the API key.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cv5m9dp7488mxx02aym5wqx82zdrj

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binscurl, jq
EnvSENSEAUDIO_API_KEY
Primary envSENSEAUDIO_API_KEY

Comments