skills/nexu-io/open-design/ai-music-album/Socket

ai-music-album

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. This catalog skill is mostly a pointer, but it instructs installation of an upstream skill bundle from GitHub without pinning or verification. The stub itself is not overtly malicious, yet the transitive skill-installation pattern and absent provenance for the real executable content make it a moderate-to-high trust risk.

Confidence: 86%Severity: 68%

Audit Metadata

Analyzed At

Sep 15, 2026, 03:50 AM

Package URL

pkg:socket/skills-sh/nexu-io%2Fopen-design%2Fai-music-album%2F@609ba2b2286a5847c4a30333e91b68eeda02a29f8f6ce2249ff8c481cdd6a90d