Skills/ClawHub/ai-music-runcomfy

ai-music-runcomfy@1.0.0

VERIFIED· install only

Publisher claims: "Generate AI music on RunComfy via the `runcomfy` CLI — a smart router across the music-model catalog. Routes to ElevenLabs AI Music Generation (premium 44.1 kHz stereo vocal tracks, 5 s–5 min, $0.0083/s) and ACE Step / ACE Step 1.5 (StepFun-AI open-weights, tag-driven composition, multilingual lyrics, $0.0002–0.0003/s, ~27× cheaper), plus ACE Step audio-inpaint (regenerate a time range inside an existing track) and ACE Step audio-outpaint (extend a track before or after). Picks the right model for the user's actual intent — premium vocal hook, cheap background music library, multilingual pop song, repair a bad chorus, lengthen a 30 s draft into a 2 min cut — and ships each model's documented prompting patterns plus the minimal `runcomfy run` invoke. Triggers on "generate music", "make a song", "AI music", "background music", "instrumental track", "soundtrack", "jingle", "theme music", "royalty-free music", "compose", "music with lyrics", "extend music", "fix this song", "inpaint music", or any explicit ask to generate or edit music." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher permew · publishing for 108 daysInstalls 603Last detonated 34 h ago
$clawhub install ai-music-runcomfy
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-10 and scored it 91/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
npx invocation of non-well-known packageSKILL.md:253 · npx invocation of non-well-known package — may execute untrusted code…**Install via verified package manager only.** Use `npm i -g @runcomfy/cli` or `npx -y @runcomfy/cli`. **Agents must not pipe an arbitrary remote install script into …Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
CRITICAL
Prompt injection attemptSKILL.md:163 · Prompt injection attempt — model control tokens"lyrics": "[inst]"Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
MEDIUM
npx invocation of non-well-known packageSKILL.md:45 · npx invocation of non-well-known package — may execute untrusted codenpx -y @runcomfy/cli --version # zero-installFix: Pin versions and sources; vendor anything fetched at install time.
AST06
CRITICAL
Prompt injection attemptSKILL.md:145 · Prompt injection attempt — model control tokens"lyrics": "[inst]"Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
Prompt injection attemptSKILL.md:132 · Prompt injection attempt — model control tokensACE Step splits **style into `tags`** and **vocal content into `lyrics`** (with `[Verse]/[Chorus]/[Bridge]` markers, or `[inst]` for instrumental). 1.5 variant adds 50+ language vocal support.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01

Cost to the agent

Instructions loaded
≈3,692 tok
1 file · 2 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.