Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Generate ai Music

v1.0.1

AI music generation assistant powered by MakebestMusic. Use when user wants to create AI-generated music, songs, or audio tracks. Perfect for content creator...

0· 302·0 current·0 all-time
byMakeBestMusic@sthk-mbm·duplicate of @sthk-mbm/texttomusic

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for sthk-mbm/generate-ai-music.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Generate ai Music" (sthk-mbm/generate-ai-music) from ClawHub.
Skill page: https://clawhub.ai/sthk-mbm/generate-ai-music
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: apiKey
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install generate-ai-music

ClawHub CLI

Package manager switcher

npx clawhub@latest install generate-ai-music
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (AI music generation) aligns with the code and SKILL.md. The only required secret is 'apiKey', which the scripts use as a Bearer token to call Makebestmusic endpoints. No unrelated services, binaries, or config paths are requested.
Instruction Scope
SKILL.md limits runtime behavior to running the included node scripts, prompting the user for a description when needed, and checking status. It does not instruct reading other files, scanning system state, or exfiltrating data to unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only skill with two small JS scripts). Nothing is downloaded from arbitrary URLs or written to non-standard system locations.
Credentials
Only 'apiKey' is required and declared as primaryEnv, which is appropriate for a service API. The code also respects an optional MBM_API_BASE env var (defaults to api.makebestmusic.com); this allows redirecting the endpoint and should only be set to trusted values. No other sensitive env vars or unrelated credentials are requested.
Persistence & Privilege
Skill is not 'always: true' and does not request system-wide config changes. It runs as a user-invoked/autonomously-invokable skill (the platform default) and does not modify other skills' settings.
Assessment
This skill appears coherent: it only needs a MakebestMusic apiKey and calls the provider's API to create and query music jobs. Before installing, confirm you trust MakebestMusic (the skill's source/homepage metadata is missing), store the apiKey securely, and avoid setting MBM_API_BASE unless you trust the alternate endpoint (it would redirect where your key and prompts are sent). If you have doubts about provenance, review the small scripts (they are included and readable) or only enable the skill as user-invocable rather than globally automatic.
scripts/generate.js:3
Environment variable access combined with network send.
scripts/query.js:3
Environment variable access combined with network send.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🎵 Clawdis
EnvapiKey
Primary envapiKey
latestvk976d62ayyfk98yfknv08q88t5832en5
302downloads
0stars
2versions
Updated 2h ago
v1.0.1
MIT-0

🎵 AI Music Studio

✨ Describe your vision, let AI compose the melody ✨


🚀 Get Your API Key

  1. Visit 👉 MBM官网 and sign up 📝
  2. Go to My Account → Claw key 🔑
  3. Click Create Key and copy it ✂️
  4. ⚠️ Important: Save your key immediately — it won't be shown again!

⚙️ Configure Your Key

  1. Open OpenClaw app 📱
  2. Click Skills in the left menu 📋
  3. Find text-to-music 🎶
  4. Click Configure or Environment Variables
  5. Enter your Claw key (xxx...) in the apiKey field 🔐
  6. Save — you're ready to go! 🎉
  7. Restart openclaw

💫 How It Works

Just tell me what kind of song you want! For example:

  • "Create a happy pop song about summer"
  • "Generate an upbeat K-pop dance track"
  • "Make a relaxing piano piece for studying"

Instrumental or Vocals?

  • If you want vocals (song with singing): just describe your song
  • If you want pure music (no singing): include words like "instrumental", "pure music", or "no vocals" in your request

What to include in your description:

  • 🎼 Genre: Pop, Electronic, Classical, Rock, Jazz, R&B, Hip-hop, K-pop, Chinese-style
  • 😊 Mood: Happy, Sad, Romantic, Energetic, Calm, Exciting
  • 💖 Theme: Love, Dreams, Nature, Night, Adventure
  • 🎸 Instruments: Piano, Guitar, Drums, Synth, Strings

I'll default to vocals if you don't specify!


💬 Example Requests

With Vocals (Default)

  • "Create a happy pop song about summer with synth and guitar"
  • "Generate an upbeat K-pop dance track about love"
  • "Write a romantic R&B song about heartbreak"
  • "Make an energetic electronic song for a workout"

Instrumental

  • "Create an instrumental piano piece for studying"
  • "Generate a relaxing ambient track, no vocals"
  • "Make a pure music classical piano piece"

Check Status

  • "How's my song going?"
  • "Is my song ready?"

🎵 Generating a Song

When user requests a song:

  1. If user provides description: Use their description, default to vocals (false) unless they explicitly say "instrumental" or "pure music"
  2. If user says "create a song" or "generate music" without description: Ask them what kind of song they want

Then run:

node ~/.openclaw/workspace/skills/text-to-music/scripts/generate.js "<prompt>" <instrumental>

Parameters:

  • <prompt>: Song description
  • <instrumental>: "true" for instrumental/pure music, "false" for vocals

Returns:

{
 "success": true,
 "music_ids": ["abc123", "def456"],
 "status": "pending",
 "message": "Music generation started!"
}

🔍 Query Task Status

Check generation status:

node ~/.openclaw/workspace/skills/text-to-music/scripts/query.js "<music_id_1> <music_id_2> ..."

Returns (completed):

[
 {
 "music_id": "abc123",
 "status": "completed",
 "url": "https://makebestmusic.com/app/shared-music/abc123"
 }
]

Returns (processing):

[
 {
 "music_id": "abc123",
 "status": "pending"
 }
]

Status handling:

  • completed: Present with celebration! Show title, duration (if available), and clickable link
  • pending: Tell user it's still processing, suggest they ask again later
  • failed: Explain failure, suggest retrying with different description

⏱️ Generation Time

  • ⏱️ Typical time: 2-3 minutes
  • 💡 Ask "How's my song going?" to check the status

❓ Troubleshooting

Q: "API Key invalid" error?

Make sure the key is copied completely (includes "sk-" prefix). No extra spaces. Try generating a new key if issues persist.

Q: How long does it take?

Usually 2-3 minutes. Ask me "How's my song going?" to check!

Q: What if generation fails?

Try a simpler description. Avoid special characters. Try again with different keywords.

Comments

Loading comments...