Is dumoedss/acestep safe?
Yes. dumoedss/acestep is safe to install. Oathe's behavioral security audit gave the acestep skill by dumoedss a trust score of 88/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/dumoedss/acestep
Is dumoedss/acestep safe to install?
This skill provides legitimate music generation functionality through the ACE-Step API with reasonable security practices. The main concerns are data transmission to external services and executable script components, but these appear necessary for the stated functionality.
What security issues were found in dumoedss/acestep?
Category Scores
Findings (3)
MEDIUM External API Data Transmission -25 ▶
The skill transmits user-provided lyrics, music descriptions, and potentially personal creative content to external services (api.acemusic.ai). While this is the intended functionality for music generation, users should be aware that their creative input will be sent to third-party services.
LOW Executable Bash Script -15 ▶
The skill includes an executable bash script (acestep.sh) that will be run by the agent. The script appears legitimate for music generation API interactions but represents code execution risk.
LOW External Service Dependency -20 ▶
The skill's functionality depends on external music generation services, creating potential privacy and availability concerns for users who may not realize their creative content leaves their system.
Should I install dumoedss/acestep?
Oathe's verdict for dumoedss/acestep is SAFE with a trust score of 88/100. Recommendation: Install.