AI Music & Sound

• Outcome: Pass
• Latest audit: Jul 27, 2026 · 4:08 PM UTC
• Version: 1.0.1

Overview

This skill is a coherent guide for choosing licensed AI music and sound effects, with no hidden execution, persistence, or credential use found.

Before installing, treat this as licensing workflow guidance rather than legal advice: verify current music-tool terms, use paid commercial licenses for brand work, keep receipts, and avoid copyrighted or trending platform audio unless you have explicit rights.

SkillSpector

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Unrestricted Tool Access

Medium

• Category: Excessive Agency

Content

- **Pairs with:** `ai-voiceover` (voice + music together), `reels-script`/`tiktok-script` (the edit it
  scores), `captions-and-clipping` (captions over the same video), `ai-video` (when the video tool's native
  audio is enough).
- **Tools:** ElevenLabs Music/SFX, Suno, Udio, Stable Audio + stock libraries (Epidemic/Artlist/Soundstripe)
  — connection/license/litigation facts + the WoopSocial flow: `tools/integrations/ai-music-and-sound.md`
  (and `tools/integrations/elevenlabs.md` for the ElevenLabs side).
- **Publishes via:** the **creator bakes audio in** → `scheduling-and-queue → WoopSocial` (the finished

• Confidence: 26% confidence
• Finding: Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.