baixar-musica

Warn

Audited by Socket on Oct 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose and visible commands mostly align with a YouTube-audio download skill, and no credential theft or exfiltration path is evident. The main concern is install/execution trust: the skill relies on an unseen local PowerShell script plus partially unverifiable Windows tool distribution paths, so the real execution footprint cannot be fully validated from the supplied content.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Oct 26, 2026, 07:33 PM
Package URL
pkg:socket/skills-sh/majinmagros%2Fmagros.ai-skills%2Fbaixar-musica%2F@530484697bbd0763dc05d98ef101dfc68d0b83878fa882c0b1c377361f00360b