Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Text to Music

v1.0.0

AI music generation assistant powered by MakebestMusic. Use when user wants to create AI-generated music, songs, or audio tracks. Perfect for content creator...

0· 193·0 current·0 all-time
byMakeBestMusic@sthk-mbm

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for sthk-mbm/texttomusic.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Text to Music" (sthk-mbm/texttomusic) from ClawHub.
Skill page: https://clawhub.ai/sthk-mbm/texttomusic
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: apiKey
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install texttomusic

ClawHub CLI

Package manager switcher

npx clawhub@latest install texttomusic
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description say 'MakebestMusic' generation and the scripts call api.makebestmusic.com endpoints using an apiKey. The single required environment variable (apiKey) matches the described need for a service API key.
Instruction Scope
SKILL.md instructs the agent to run the included node scripts with a prompt and an instrumental flag; the scripts only read apiKey (and optionally MBM_API_BASE), send requests to the MakebestMusic API, and print JSON responses. The instructions do not ask the agent to read unrelated files, other credentials, or transmit data to unexpected endpoints.
Install Mechanism
No install spec; this is instruction + small included scripts. There are no downloads, archive extracts, or external install steps that would write or execute arbitrary third-party code.
Credentials
The only required env var declared is apiKey, which is appropriate. One minor inconsistency: the scripts also honor MBM_API_BASE (to override the API base URL) but MBM_API_BASE is not declared in requires.env or documented in SKILL.md. This is likely a convenience override but could be noted because it allows redirecting requests to a different host if set.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system-level privileges or modify other skills' configs. It runs when invoked and uses its own included scripts.
Assessment
This skill appears to do what it says: it sends your prompt (and optionally asks for vocals vs instrumental) to MakebestMusic using an apiKey you provide. Before installing: (1) Verify you trust Makebestmusic (the SKILL.md links to makebestmusic.com and includes an affiliate PID), since your prompts and any lyrics will be sent to that service; (2) Only set the apiKey environment variable for this skill and avoid providing other credentials; (3) Be aware the scripts support an MBM_API_BASE override (not documented in the UI) — do not set it to unknown hosts unless you understand where your data will go; (4) If you care about privacy of prompts/lyrics, review MakebestMusic's terms/privacy. Technical note: the included node scripts assume a Node runtime with global fetch available.
scripts/generate.js:3
Environment variable access combined with network send.
scripts/query.js:3
Environment variable access combined with network send.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🎵 Clawdis
EnvapiKey
Primary envapiKey
latestvk970an64j0y1y0fr1vvtmk2ew5833542
193downloads
0stars
1versions
Updated 22h ago
v1.0.0
MIT-0

🎵 AI Music Studio

✨ Describe your vision, let AI compose the melody ✨


🚀 Get Your API Key

  1. Visit 👉 MBM官网 and sign up 📝
  2. Go to My Account → Claw key 🔑
  3. Click Create Key and copy it ✂️
  4. ⚠️ Important: Save your key immediately — it won't be shown again!

⚙️ Configure Your Key

  1. Open OpenClaw app 📱
  2. Click Skills in the left menu 📋
  3. Find text-to-music 🎶
  4. Click Configure or Environment Variables
  5. Enter your Claw key (xxx...) in the apiKey field 🔐
  6. Save — you're ready to go! 🎉
  7. Restart openclaw

💫 How It Works

Just tell me what kind of song you want! For example:

  • "Create a happy pop song about summer"
  • "Generate an upbeat K-pop dance track"
  • "Make a relaxing piano piece for studying"

Instrumental or Vocals?

  • If you want vocals (song with singing): just describe your song
  • If you want pure music (no singing): include words like "instrumental", "pure music", or "no vocals" in your request

What to include in your description:

  • 🎼 Genre: Pop, Electronic, Classical, Rock, Jazz, R&B, Hip-hop, K-pop, Chinese-style
  • 😊 Mood: Happy, Sad, Romantic, Energetic, Calm, Exciting
  • 💖 Theme: Love, Dreams, Nature, Night, Adventure
  • 🎸 Instruments: Piano, Guitar, Drums, Synth, Strings

I'll default to vocals if you don't specify!


💬 Example Requests

With Vocals (Default)

  • "Create a happy pop song about summer with synth and guitar"
  • "Generate an upbeat K-pop dance track about love"
  • "Write a romantic R&B song about heartbreak"
  • "Make an energetic electronic song for a workout"

Instrumental

  • "Create an instrumental piano piece for studying"
  • "Generate a relaxing ambient track, no vocals"
  • "Make a pure music classical piano piece"

Check Status

  • "How's my song going?"
  • "Is my song ready?"

🎵 Generating a Song

When user requests a song:

  1. If user provides description: Use their description, default to vocals (false) unless they explicitly say "instrumental" or "pure music"
  2. If user says "create a song" or "generate music" without description: Ask them what kind of song they want

Then run:

node ~/.openclaw/workspace/skills/text-to-music/scripts/generate.js "<prompt>" <instrumental>

Parameters:

  • <prompt>: Song description
  • <instrumental>: "true" for instrumental/pure music, "false" for vocals

Returns:

{
 "success": true,
 "music_ids": ["abc123", "def456"],
 "status": "pending",
 "message": "Music generation started!"
}

🔍 Query Task Status

Check generation status:

node ~/.openclaw/workspace/skills/text-to-music/scripts/query.js "<music_id_1> <music_id_2> ..."

Returns (completed):

[
 {
 "music_id": "abc123",
 "status": "completed",
 "url": "https://makebestmusic.com/app/shared-music/abc123"
 }
]

Returns (processing):

[
 {
 "music_id": "abc123",
 "status": "pending"
 }
]

Status handling:

  • completed: Present with celebration! Show title, duration (if available), and clickable link
  • pending: Tell user it's still processing, suggest they ask again later
  • failed: Explain failure, suggest retrying with different description

⏱️ Generation Time

  • ⏱️ Typical time: 2-3 minutes
  • 💡 Ask "How's my song going?" to check the status

❓ Troubleshooting

Q: "API Key invalid" error?

Make sure the key is copied completely (includes "sk-" prefix). No extra spaces. Try generating a new key if issues persist.

Q: How long does it take?

Usually 2-3 minutes. Ask me "How's my song going?" to check!

Q: What if generation fails?

Try a simpler description. Avoid special characters. Try again with different keywords.

Comments

Loading comments...