Suno

This skill appears to be what it says (guides prompt engineering, can use third‑party APIs, and can automate the suno.com UI), but there is an important documentation inconsistency: SKILL.md asserts "the skill itself makes no external requests" while multiple sections show API flows (aimusicapi.ai, evolink.ai) and browser automation that will contact external endpoints. Before installing or using: - Treat API usage as optional: the skill will only contact remote services if you choose the API mode or let it drive a browser session. If you don't want external network calls, stick to prompt/lyrics guidance without invoking API/browser operations. - Verify you trust the third‑party services (aimusicapi.ai, evolink.ai) before giving API keys. Use environment variables (system keychain) rather than writing keys to files. - Expect browser automation to simulate clicks and require you to log in interactively; do not allow automation to reuse credentials or session tokens unless you understand the behavior. - Ask the author to clarify the contradictory statement about "no external requests"; if that was a documentation error, the skill is likely benign but sloppy. If they intended the skill to never call external endpoints, verify how the agent enforces that. What would change this assessment: an author clarification/corrected SKILL.md removing the contradictory claim (increasing confidence toward benign), or conversely any hidden code or install scripts that download/execute remote binaries (would raise severity).