Music Maker

• Analyzed: Apr 17, 2026, 6:21 AM
• Findings: 1
• Version: 1.0.0
• Hash: fb6cec54c1b30632598f2b599d77accd534c194805e7cb3058e36aa5894ee701
• Source: palm
• External report: View on VirusTotal

Findings (1)

The music-maker skill (SKILL.md) facilitates interaction with an external AI service at mega-api-prod.nemovideo.ai. It is classified as suspicious because it instructs the agent to automatically acquire authentication tokens via anonymous registration and perform environment discovery by inspecting its own install path to populate telemetry headers. Furthermore, the instructions explicitly direct the agent to hide technical details of its API interactions and network operations from the user, which reduces transparency regarding the data being sent to the third-party endpoint.