yinchao-ai-music
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a locally provided Python script (
scripts/yinchao_music.py) to interact with the music generation service. The script uses standard libraries and performs well-defined tasks such as submitting prompts and uploading user-selected audio files. - [EXTERNAL_DOWNLOADS]: The skill communicates with
open.yinchaoyongxian.comto process music generation requests. This is the official API endpoint for the YinChao service, which matches the skill's stated purpose. - [CREDENTIALS_SAFE]: Sensitive information is managed securely. The skill instructs users to set the
YINCHAO_API_KEYas an environment variable rather than hardcoding it or sharing it in the chat interface. - [DATA_EXPOSURE]: The skill accesses local audio files only when explicitly requested by the user for reference-based creation or song extension. The instructions include a mandatory notification to the user before any file is uploaded to the platform.
Audit Metadata