skills/julianobarbosa/claude-code-skills/yt-music/Socket

yt-music

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is broadly aligned with YouTube Music control, and its network/data flows appear to target the intended service. However, it relies on an unofficial client and asks the user to provide raw browser session cookies, creating meaningful credential-handling and supply-chain risk even without clear malicious intent.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Sep 18, 2026, 06:13 PM

Package URL

pkg:socket/skills-sh/julianobarbosa%2Fclaude-code-skills%2Fyt-music%2F@20c32473186b2523a41ee9ba283f63eea6f72b8bfe590e24af8de65743adf8b5