AI Music Generator Skill

Overview

Turn a theme, lyrics, or reference audio into songs, instrumentals, and soundtracks, from inside Claude Code, Codex, or OpenClaw. The work is produced on the hosted, paid Beatra service (mcp.beatra.ai).

This catalog entry is a reviewed pointer, not the executable package. It contains no client code and performs no Beatra operation by itself. The package it points to bundles three standard-library Python scripts that make network calls, store a credential, and can replace their own files. Read Install and Security & Safety Notes before activating it.

The archive holds regular files only (no symlinks, no executable bits, no binaries). Confirm that with the inspect commands below. Every file must be byte-identical to the source tree at the pinned commit.

When to Use This Skill

• Use when the user explicitly wants AI Music Generator audio produced on Beatra and accepts that it is paid.
• Use when they have agreed to send lyrics, themes, or reference audio to a third party.
• Do not use for local DAW work or when no paid render was approved.

Install (pinned, verified, approved twice)

Step 1: Download and verify into a review directory

Explain that this downloads an external package from cdn.beatra.ai, then ask for approval. Only after approval:

umask 077
review_dir="$(mktemp -d)"
cd "$review_dir" || exit 1
curl -fsSLO "https://cdn.beatra.ai/agent-packages/music-generation-studio/v0.1.8/music-generation-studio-skill-0.1.8.zip"
printf '%s  %s\n' \
  '8cd20e3c8c021828129c257343976e38145f838c1c65c7ba1b5e55076c4180c5' \
  'music-generation-studio-skill-0.1.8.zip' | shasum -a 256 -c -

Stop if the check does not print OK. The expected digest comes from this catalog entry, not from a file on the same CDN.

Step 2: Inspect before activation

unzip -l music-generation-studio-skill-0.1.8.zip
unzip -q music-generation-studio-skill-0.1.8.zip
find music-generation-studio -type l -print            # expect no output
find music-generation-studio -type f -perm -111 -print # expect no output
grep -n '"auto_update": True' music-generation-studio/scripts/mcp_client.py

Optionally confirm byte identity with the public source tree (a second, independent host):

git clone --quiet --filter=blob:none --no-checkout https://github.com/beatra-ai/ai-music-generator-skill.git src
git -C src checkout --quiet fee8fbf3dcd8a723bee1e372915c6f78593f9b35 -- skills/music-generation-studio
(cd music-generation-studio && find . -type f | LC_ALL=C sort | xargs shasum -a 256) > archive.sha
(cd src/skills/music-generation-studio && find . -type f | LC_ALL=C sort | xargs shasum -a 256) > tree.sha
cmp archive.sha tree.sha && echo IDENTICAL

Report to the user what the review found: SKILL.md, manifest.json, the bundled Markdown references, and scripts/authorize.py, scripts/mcp_client.py, scripts/uninstall.py (Python 3.10+, standard library only, no dependency installation, no lifecycle hooks). Summarize the network, credential, local-state, telemetry, and self-update behavior listed under Security & Safety Notes.

Step 3: Copy in and disable self-update before any other command

Ask for a second, separate approval, because this changes agent configuration. Then copy the reviewed tree to the host's skills directory (Claude Code shown; use the equivalent path for other hosts) and immediately turn off silent self-update for that exact path:

dest="$HOME/.claude/skills/music-generation-studio"
test ! -e "$dest" || { echo "destination exists; stop and ask the user"; exit 1; }
cp -R music-generation-studio "$dest"
python3 "$dest/scripts/mcp_client.py" update --auto off

The last command must print

…