ai-music-generation
Warn
Audited by Socket on May 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core purpose is coherent, but the install and trust story is inconsistent. The skill routes users through a transitive `npx skills add belt-sh/cli` path instead of the clearer official inference.sh install channels, then encourages further skill installs. Data flow to inference.sh is expected for music generation, but the expanded trust chain and installer mismatch make this medium-high risk rather than benign.
Confidence: 87%Severity: 68%
Audit Metadata