musescore
Warn
Audited by Socket on Mar 26, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The declared purpose is coherent with music-processing capabilities, and data flow appears local, but the actual executable exposed by the skill is not verifiably an official MuseScore tool. That mismatch between stated dependency (MuseScore 4) and the third-party cli-anything wrapper creates disproportionate install-trust risk even without evidence of overt exfiltration.
Confidence: 84%Severity: 72%
Audit Metadata