Security audit
Ace Music Free
Security checks across malware telemetry and agentic risk
Overview
This skill is a simple music-generation guide that asks the agent to use an ACE Music API key and create MP3 files, but its referenced helper script is not included.
Install only if you are comfortable configuring an ACE Music API key in the environment and running a local generation command. Because the referenced scripts/generate.sh file is not packaged here, confirm what script will actually run before using the skill in a workspace.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
