Skills ai-music

📦

ai-music

Name: ai-music
Author: agentspace-so

Content revision r3 High Risk ⚙️ External commands🌐 Network access📁 Filesystem access

Create and Edit AI Music with RunComfy

Choosing a music model and formatting its inputs can slow production. This skill routes each request and prepares a suitable RunComfy CLI invocation.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "ai-music" from https://skillstore.io/skills/agentspace-so-ai-music.md and its manifest at https://skillstore.io/api/skills/agentspace-so-ai-music/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/agentspace-so-ai-music.md Signed manifest GET /api/skills/agentspace-so-ai-music/manifest Signed lockfile GET /api/skills/agentspace-so-ai-music/lockfile

Test it

Using "ai-music". Create a 30-second upbeat electronic instrumental for a product demonstration.

Expected outcome:

Selected ACE Step base for an affordable instrumental draft.
Prepared tags for upbeat electronic music, steady rhythm, bright synthesizers, and no vocals.
Generated a 30-second track in the requested output directory.

Using "ai-music". Replace seconds 20 through 35 of my track with a softer piano bridge.

Expected outcome:

Selected ACE Step audio inpainting for the time-bounded edit.
Kept the source style while specifying a soft piano bridge without drums.
Prepared the repair for seconds 20 through 35.

Using "ai-music". Create a polished 10-second vocal jingle for a commercial campaign.

Expected outcome:

Selected ElevenLabs Music for premium vocal quality.
Structured a short campaign brief with vocal direction and section markers.
Presented the estimated cost and generation details for approval.

Security Audit

High Risk

v11 • 7/23/2026 Open versioned report

All 76 static alerts are false positives caused by Markdown, documentation links, normal token-path disclosure, or model-selection prose. Semantic review found unsafe shell quoting, external transmission of user content, and paid execution without mandatory cost confirmation.

Files scanned

276

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (3)

High

SKILL.md:55-58 SKILL.md:260

Unsafe Shell Quoting for User-Controlled Music Inputs

The workflow places prompts, lyrics, tags, and URLs inside a single-quoted shell argument. Apostrophes or shell syntax can break quoting before the CLI receives the JSON, contrary to the safety claim.

The generic invocation uses a single-quoted inline JSON argument, while line 260 directs the agent to place variable user content in that argument. Shell parsing occurs before the CLI receives JSON.

Medium

SKILL.md:137-146 SKILL.md:254-265

External Transmission of User Content

The workflow sends prompts, lyrics, and source-audio references to the RunComfy Model API. Confidential or licensed material may reach third-party processors without an explicit per-job notice.

The skill explicitly supplies lyrics and audio URLs, and line 254 states that the CLI posts the matching JSON body to the RunComfy Model API.

Medium

SKILL.md:69-82 SKILL.md:208-226 SKILL.md:254

Paid Generation Without Explicit Cost Confirmation

The agent chooses among priced models and invokes remote generation without requiring approval of the provider, duration, or estimated charge. Batch requests could create unintended spend.

The skill lists per-second prices, routes requests automatically, and says it invokes the selected model. The decision flow contains no mandatory cost confirmation.

Risk Factors

⚙️ External commands (50)

🌐 Network access (18)

SKILL.md:22 SKILL.md:30 SKILL.md:61 SKILL.md:103 SKILL.md:123 SKILL.md:146 SKILL.md:155 SKILL.md:164 SKILL.md:232 SKILL.md:233 SKILL.md:234 SKILL.md:235 SKILL.md:250 SKILL.md:271 SKILL.md:272 SKILL.md:273 SKILL.md:274 SKILL.md:275

📁 Filesystem access (2)

SKILL.md:259 SKILL.md:259

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/agentspace-so-ai-music/audits/11?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/agentspace-so-ai-music/security.svg)](https://skillstore.io/skills/agentspace-so-ai-music?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/agentspace-so-ai-music?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentspace-so-ai-music/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/agentspace-so-ai-music.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

agentspace-so. (2026). ai-music security audit report (audit version 11) [Author version unspecified]. Skillstore. https://skillstore.io/skills/agentspace-so-ai-music/audits/11

BibTeX citation

@techreport{agentspace-so-agentspace-so-ai-music-2026,
  author = {agentspace-so},
  title = {ai-music security audit report (audit version 11)},
  institution = {Skillstore},
  year = {2026},
  number = {11},
  url = {https://skillstore.io/skills/agentspace-so-ai-music/audits/11},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ai-music security audit report (audit version 11)"
version: "unspecified"
type: report
authors:
  - name: "agentspace-so"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/agentspace-so-ai-music/audits/11"
identifiers:
  - type: other
    value: "skillstore:agentspace-so-ai-music:audit:11"
    description: "Skillstore immutable audit report identifier"

Compare variants

5 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

runcomfy-com Recommended

runcomfy-com-ai-music

Skillstore Score 78

Evidence Confidence High

Skillstore usage 18

Updated

2026-08-21

genmedia-labs

genmedia-labs-ai-music

Skillstore Score 69

Evidence Confidence Medium

Skillstore usage 1

Updated

2026-08-21

skills-collective

skills-collective-ai-music

Skillstore Score 50

Evidence Confidence Medium

Skillstore usage 5

Updated

2026-08-21

agentspace-so Current

agentspace-so-ai-music

Skillstore Score 38

Evidence Confidence High

Skillstore usage 11

Updated

2026-08-21

doany-ai

doany-ai-ai-music

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 11

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Produce Campaign Music

Create a polished jingle or vocal track matched to campaign length, mood, and brand requirements.

Build Game Audio Libraries

Generate affordable instrumental loops with varied genres, tempos, and moods for gameplay scenes.

Repair or Extend Songs

Replace a weak section or add an intro and outro without regenerating the complete track.

Try These Prompts

Create an Instrumental

Create a {duration}-second instrumental in {genre}. Use {mood}, {tempo}, and {instruments}. Choose a suitable RunComfy model and generate it.

Generate a Vocal Song

Create a {duration}-second {language} song in {genre}. Use these lyrics: {lyrics}. Keep the vocal style {vocal_style} and mood {mood}.

Repair a Track Section

Repair {start_time} to {end_time} in {audio_url}. Match {style} and replace the section with {section_description}. Preserve the surrounding arrangement.

Plan a Music Batch

Plan {track_count} tracks for {project_type} and {audience}. Keep within {budget}. Compare models, define varied briefs, estimate cost, and generate only approved tracks.

Best Practices

Start with short drafts, then increase duration after the style and arrangement are approved.
State genre, mood, tempo, instruments, vocal language, duration, and section structure explicitly.
Review costs, rights, privacy terms, and service terms before generation, especially for commercial projects.

Avoid

Do not place untrusted text directly inside shell-quoted command arguments.
Do not send private audio or lyrics without permission and an approved data-sharing policy.
Do not request paid batches before confirming model, duration, track count, and estimated cost.

Frequently Asked Questions

Which music models does this skill support?

It routes requests to ElevenLabs Music, ACE Step, ACE Step 1.5, and ACE Step audio editing endpoints.

Can it create instrumental music?

Yes. Specify the genre, mood, instruments, tempo, duration, and that vocals are not required.

Can it use my existing audio?

Yes. ACE Step can replace a time range or extend audio before and after the original track.

Does it work with multilingual lyrics?

Yes. ACE Step 1.5 supports more than 50 vocal languages, while ElevenLabs Music also supports multilingual vocals.

Does generation cost money?

Yes. RunComfy models have usage prices. Confirm the selected model, duration, track count, and estimated cost before execution.

Does the skill verify music rights?

No. Users must verify rights for lyrics, source audio, generated outputs, and their intended commercial use.

Developer Details

Author

agentspace-so

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/agentspace-so/runcomfy-agent-skills/tree/main/ai-music/

Ref

181fdefcafd96b041926e61c4b2e306ca7e7820e

Maintenance freshness

7/24/2026

Usage

6 downloads · 33 views

File structure

📄 SKILL.md