ai-music-generation

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core purpose is coherent, but the skill expands trust by requiring installation of another skill and routing all generation through the Belt/inference.sh platform. Same-org evidence lowers concern versus a random payload, yet transitive skill installation, credentialed external CLI use, and intermediary model access make the footprint broader than a simple music-generation helper.

Confidence: 85%Severity: 74%
Audit Metadata
Analyzed At
Jul 16, 2026, 04:52 PM
Package URL
pkg:socket/skills-sh/halt-catch-fire%2Fskills%2Fai-music-generation%2F@08d952b4fc0b9ee1ffa8cdf41296139325502938f485549ea17b2593a3010c84
Security Audit — socket — ai-music-generation