harmix-music-search

Warn

Audited by Socket on Sep 23, 2026

2 alerts found:

SecurityAnomaly
SecurityMEDIUM
references/video-search.md

The fragment is ordinary integration documentation for a video-to-music search workflow. It does not contain apparent malware or intentional obfuscation. However, it exposes a hardcoded API credential and directs potentially sensitive video frames to an external service. The credential should be revoked or rotated and replaced with an environment-variable or secret-manager reference; shell inputs should also be safely quoted and validated.

Confidence: 98%Severity: 72%
AnomalyLOW
references/prompt-search.md

The fragment is API usage documentation with a publicly embedded API key. The exposed credential should be revoked or rotated and replaced with an environment-variable or secret-manager reference. There is no clear malicious behavior in the supplied content, but the credential disclosure creates a moderate supply-chain and operational security risk if the key is active.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:48 AM
Package URL
pkg:socket/skills-sh/harmix%2Fharmix-skills%2Fharmix-music-search%2F@1f384688af2395f644197411ff8c9c70f51375906d98e9048dda4be6a681421a
Security Audit — socket — harmix-music-search