Topmediai AI Music Generator

Generate AI music, BGM, or lyrics via TopMediai API. Supports auto polling and two-stage output (preview first, then final full audio) for generation tasks.

Security Scan

The skill's code, instructions, and environment requirements are consistent with its stated purpose (calling the TopMediai API to generate music/lyrics); it asks only for the expected API key and does not exhibit surprising or obfuscated behavior.

Purpose & Capability

Name/description, plugin.json, SKILL.md and the included Python code all consistently implement a TopMediai client (lyrics generation, music generation, task polling, MP4 generation). Required env var (TOPMEDIAI_API_KEY) and optional TOPMEDIAI_BASE_URL are appropriate and expected.

Instruction Scope

Runtime instructions and the scripts only load .env, read the declared environment variables, call TopMediai endpoints, and emit JSON to stdout. The SKILL.md and code do not instruct reading unrelated system files or exfiltrating secrets to unknown endpoints.

Install Mechanism

No registry install spec is present (instruction-only at registry level) but the bundle includes code and a requirements.txt (requests, python-dotenv). This is reasonable for a Python CLI skill, but the user must run pip install -r requirements.txt manually or otherwise ensure those packages are available.

Credentials

Only TOPMEDIAI_API_KEY is required (plugin.json declares it). TOPMEDIAI_BASE_URL and TOPMEDIAI_DEBUG are optional. No unrelated credentials or config paths are requested.

Persistence & Privilege

The skill is user-invocable, not forced-always, and does not modify system-wide agent settings. It runs as subprocesses in the workspace and does not attempt to persist credentials beyond reading .env.

Assessment

This skill appears coherent and implements a TopMediai API client. Before installing: (1) Only provide a TopMediai API key (TOPMEDIAI_API_KEY) if you trust the TopMediai service. (2) Install the Python dependencies (requests, python-dotenv) in an isolated environment. (3) The skill runs local Python subprocesses and will poll the API (defaults to up to 900s) — expect long-running subprocesses for generation tasks. (4) If you override TOPMEDIAI_BASE_URL, point it only to a trusted endpoint (otherwise network requests could go to an unexpected host). (5) Review the included scripts if you need assurance they only access the skill workspace and the declared .env file (they do).

Music Generator TopMediai Skill

Capability Overview

This skill supports:

1. Generate a full song with lyrics
2. Generate pure background music (BGM)
3. Generate lyrics only
4. Query music generation tasks
5. Convert song_id to MP4

Preflight Check (Mandatory)

• Configure TOPMEDIAI_API_KEY in <skill_root>/.env
• Optional: TOPMEDIAI_BASE_URL (default https://api.topmediai.com)
• If key is missing, stop and ask user to configure.

Command

• Main command: /music_generator_topmediai
  • mode=normal (default): lyrics -> submit -> poll preview/full
  • mode=bgm: instrumental generation -> poll preview/full
  • mode=lyrics: lyrics only

API Endpoints Used

• Generate lyrics: POST {BASE_URL}/v1/lyrics
• Submit generation: POST {BASE_URL}/v3/music/generate
• Query tasks: GET {BASE_URL}/v3/music/tasks?ids=<id[,id2,...]>
• Generate MP4 by song_id: POST {BASE_URL}/v3/music/generate-mp4?song_id=<song_id>

Return Event Conventions

• lyrics_ready
• submitted
• preview_ready
• full_ready
• failed / timeout