Tomoviee Text to Music

Generate background music from text prompts using Tomoviee Text-to-Music API (`tm_text2music`) through Wondershare OpenAPI gateway (`https://openapi.wondersh...

Security Scan

The skill's code, instructions, and dependencies are coherent with its stated purpose (calling Tomoviee's text-to-music API via the Wondershare OpenAPI gateway) and do not request unrelated credentials or install arbitrary third-party code.

Purpose & Capability

The name/description state text-to-music via Tomoviee/OpenAPI and the included Python client, auth helper, and docs all implement that same behavior. Required dependencies are minimal (requests) and match the task. No unrelated services, binaries, or broad permissions are requested.

Instruction Scope

SKILL.md instructs installing dependencies, running the provided auth helper or importing the client, and calling the documented endpoints (openapi.wondershare.cc). The runtime instructions and scripts only reference the declared API endpoints and do not read or transmit unrelated local files or environment state. The client accepts app_key/app_secret as parameters (not implicit scanning of system secrets).

Install Mechanism

There is no install spec; the package ships as code plus a pip requirements.txt with a single well-known dependency (requests). No downloads from unknown URLs, no archive extraction, and no creation of non-standard system binaries.

Credentials

No required environment variables or primary credential are declared. The code legitimately needs an app_key and app_secret for API auth; these are passed as runtime parameters to the client (or could be provided via env vars by the user). The number and type of secrets requested are proportional to the API integration. There are no unrelated secret names or extra credentials requested.

Persistence & Privilege

The skill does not request persistent installation privileges (always: false). The code does not store credentials to disk; the auth helper prints a base64 token to stdout and the client keeps credentials in-memory. The skill does not modify other skills or system-wide settings.

Assessment

This package appears to be what it claims: a small Python client for Tomoviee's text-to-music API. Before installing, consider these practical precautions: - Treat your app_key/app_secret as secrets: do not paste them into public logs or share them. The provided helper prints a base64 token to stdout — avoid capturing that output in public logs. - The client will send your prompt and any supplied callback URL to the Tomoviee/Wondershare gateway (openapi.wondershare.cc). Only provide callback URLs you control and trust, because remote callbacks could receive generated content or notifications. - Review the small Python files yourself; they only use requests and call the two documented endpoints. If you want secrets as environment variables, prefer a secure secret store rather than hardcoding or inline CLI arguments. - Run in an isolated Python environment (virtualenv) and install only the stated dependency (requests). If you need higher assurance, test network traffic (e.g., with a proxy) to confirm requests go only to the declared host. If you want additional assurance, request the skill author to declare required env vars (e.g., TOMOVIEE_APP_KEY, TOMOVIEE_APP_SECRET) in metadata so the credential contract is explicit, and verify the gateway host TLS certificate and vendor documentation links before use.

Tomoviee AI Text-to-Music

Overview

Generate background music from text prompts.

• API capability: tm_text2music
• Task creation endpoint: https://openapi.wondershare.cc/v1/open/capacity/application/tm_text2music
• Result endpoint: https://openapi.wondershare.cc/v1/open/pub/task

Provider and Endpoint Provenance

Use this mapping to verify provider identity and runtime endpoints:

• Vendor portals: https://www.tomoviee.ai and https://www.tomoviee.cn
• API gateway host used by this skill: https://openapi.wondershare.cc
• This skill sends runtime API calls only to openapi.wondershare.cc

Credential Handling

• app_key and app_secret are only used to construct Authorization: Basic <base64(app_key:app_secret)>.
• Credentials are kept in process memory only and are not written to disk by this skill.
• Do not commit credentials into SKILL.md, scripts, or repository files.

Quick Start

Install dependencies

pip install -r requirements.txt

Authentication helper

python scripts/generate_auth_token.py YOUR_APP_KEY YOUR_APP_SECRET

Python Client

from scripts.tomoviee_text2music_client import TomovieeText2MusicClient

client = TomovieeText2MusicClient("app_key", "app_secret")

API Usage

Basic Example

task_id = client.text_to_music(
    prompt="Upbeat tech music, modern and energetic electronic pop",
    duration=30,
    qty=1,
    disable_translate=False,
)

result = client.poll_until_complete(task_id)
import json
audio_url = json.loads(result["result"])["audio_path"][0]
print(audio_url)

Parameters

• prompt (required): Prompt text. Supports up to 77 tokens; extra content is truncated.
• duration (required): Target music duration in seconds, range 0-95.
• qty (required): Number of generated music outputs, range 1-4.
• disable_translate (optional): Whether to disable translation.
• callback (optional): Callback URL.
• params (optional): Transparent callback parameter.

Async Workflow

1. Create task and get task_id
2. Poll with poll_until_complete(task_id)
3. Parse output URL from result

Status codes:

• 1 queued
• 2 processing
• 3 success
• 4 failed
• 5 cancelled
• 6 timeout

Resources

• scripts/tomoviee_text2music_client.py - main API client
• scripts/tomoviee_text_to_music_client.py - compatibility import shim
• scripts/generate_auth_token.py - auth token helper
• references/audio_apis.md - API reference and parameter constraints
• references/prompt_guide.md - prompt writing guidance

External Resources

• Developer portal (global): https://www.tomoviee.ai/developers.html
• API docs (global): https://www.tomoviee.ai/doc/
• Developer portal (mainland): https://www.tomoviee.cn/developers.html
• API docs (mainland): https://www.tomoviee.cn/doc/
• API gateway host used by this package: https://openapi.wondershare.cc