AI-Music-Stream

Generate AI music from text prompts and stream continuously in-browser with a shareable player URL; all tracks are saved locally in a library.

Before installing: (1) Understand the missing declaration — the code requires a Sonauto API key (SONAUTO_API_KEY) via config.json or env, but the skill metadata lists none; do not share keys publicly or commit them to source control. (2) Review the musestream_server.py and restart script locally before running; the server will save generated audio and a log file in your chosen directory. (3) Do NOT expose the server to the internet without protections: add token-based auth, TLS reverse proxy, IP firewall rules, and rate-limiting as suggested in the README. (4) Be cautious about providing sensitive context (location, traffic) to the agent; limit context to what you consent to share. (5) If you plan messenger integration, expect to provide additional bot tokens — verify where and how those tokens are stored. (6) Ask the skill owner/registry to update the declared required env/credentials to reflect SONAUTO_API_KEY and any other secrets the code actually needs. If you are uncomfortable with these mismatches or exposing a local server, run the skill in an isolated environment (VM/container) or decline installation.

Type: OpenClaw Skill Name: musestream Version: 1.0.4 MuseStream is a legitimate AI music generation and streaming tool that integrates with the Sonauto API. The skill includes a Flask server (musestream_server.py) for managing generation tasks, proxying audio streams, and serving a local music library, with security measures like path traversal protection in the file-serving logic. While the server binds to all interfaces (0.0.0.0) and lacks built-in authentication, these risks are explicitly documented in the README.md along with instructions for users to secure their setup using firewalls or reverse proxies. No evidence of malicious intent, data exfiltration, or unauthorized persistence was found in the code or the agent instructions.