ai-music-generation

Warn

Audited by Socket on May 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core purpose is coherent, but the install and trust story is inconsistent. The skill routes users through a transitive `npx skills add belt-sh/cli` path instead of the clearer official inference.sh install channels, then encourages further skill installs. Data flow to inference.sh is expected for music generation, but the expanded trust chain and installer mismatch make this medium-high risk rather than benign.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
May 19, 2026, 07:49 AM
Package URL
pkg:socket/skills-sh/inference-sh%2Fskills%2Fai-music-generation%2F@c87ea05cce04ad7731a7106769cbe2e8f8d9f411
Security Audit — socket — ai-music-generation