ai-music-generation

Warn

Audited by Socket on Jun 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose and data flow are mostly coherent for hosted AI music generation, and the installer/auth paths appear tied to inference.sh. However, the skill uses transitive skill installation, a curl|sh-capable external CLI path, and broad Bash tooling, which makes the trust footprint larger than a simple music-generation helper.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 14, 2026, 07:06 PM
Package URL
pkg:socket/skills-sh/inference-sh-skills%2Fskills%2Fai-music-generation%2F@d7dd108963e242faed73dd0c8d6203a29b755ec2
Security Audit — socket — ai-music-generation