Release

AI 音乐创作助手 — 通过对话生成原创歌曲、纯音乐和 BGM。 当用户想要创作、生成、制作任何形式的音乐时使用此技能。 包括：生成带人声的歌曲、写歌词、作曲编曲、制作纯音乐/BGM/配乐，或将文字变成歌曲。 当用户提到具体音乐风格（如"来首民谣""做首说唱"）时也应触发。 支持三种模式：灵感模式（一句话生成）、...

What to check before installing: - Understand the auth flow: the skill asks users to paste a JWT-like token into the chat to register/verify; avoid pasting long-lived or sensitive tokens into conversation logs if you want them private. Consider creating a dedicated/throwaway account or short-lived token for use with this skill. - Backend domain: all network calls go to https://skill-api.muse.top (consistent across scripts). If you plan to use this skill, review that domain and the hosted service's privacy policy before giving credentials. - Local device fingerprinting: the skill computes a device id from hostname/MAC/username, hashes it, stores it in ~/.muse/device_id, and sends the hash as X-Device-Id. This is used server-side for dedup/rate-limiting but is a fingerprinting vector — be aware if you need stronger anonymity. - Inspect files before running install: the included install.sh copies files into CLI skill directories and creates ~/.muse. You can open and audit scripts locally (they use only Python stdlib and urllib). Run install in a controlled environment or sandbox if you have doubts. - Removal: uninstall removes the skill directory but leaves ~/.muse (install.sh documents how to fully delete the data: rm -rf ~/.muse). - If you are privacy-sensitive, either avoid pasting tokens into chat, use a dedicated/limited account, or ask the skill author for an OAuth/browser-based flow that avoids pasting secrets into conversation logs. Overall: the package appears internally coherent with its stated purpose; the main concerns are privacy-sensitive choices (token pasted into chat, local device fingerprinting) rather than evidence of malicious behavior.

Type: OpenClaw Skill Name: muse-ai Version: 1.0.6 The skill bundle contains a high-risk command injection vulnerability in SKILL.md, where the AI agent is instructed to execute a bash command using unsanitized user input (the JWT token) via `scripts/register.py verify --token {content}`. Additionally, `scripts/muse_api.py` performs system fingerprinting by collecting the local username, hostname, and MAC address to generate a device ID (X-Device-Id) for API requests to `https://skill-api.muse.top`. While these behaviors are functionally linked to the music generation service, the combination of system tracking and the potential for remote code execution via the agent's command-line interface poses a security risk.