skills/full-aigc-skills/dreamina-skills/dreamina-canvas-cli-text2audio/Socket

dreamina-canvas-cli-text2audio

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS due to transitive skill installation, not because of overt malicious behavior. The skill's operational scope is coherent and restrained for Dreamina music generation, but instructing the agent to install companion skills via an unpinned remote repo adds meaningful trust and supply-chain risk.

Confidence: 89%Severity: 55%

Audit Metadata

Analyzed At

Oct 1, 2026, 02:14 AM

Package URL

pkg:socket/skills-sh/full-aigc-skills%2Fdreamina-skills%2Fdreamina-canvas-cli-text2audio%2F@60cedf8ad1901c7f1b766d654d2f4e9c594f37a76720154f0669cf858692698a