Skills
Navigate
skills/netease/skills/ncm-cli-setup/Gen Agent Trust Hub

ncm-cli-setup

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill installs the @music163/ncm-cli package from the NPM registry using the global installation flag.
  • [PRIVILEGE_ESCALATION]: The included Python script scripts/install_mpv.py uses sudo to perform system-wide installations of the mpv media player using standard package managers like apt, dnf, and macports on Linux and macOS.
  • [COMMAND_EXECUTION]: The installer script scripts/install_mpv.py utilizes subprocess.run with shell=True to execute shell commands for system discovery and package installation. The commands executed are hardcoded based on the detected operating system and package manager.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:23 PM