muse

Warn

Audited by Socket on Nov 2, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/setup.sh

This fragment provisions a persistent SSH/Tailscale remote-access stack, downloads software from pkgs[.]tailscale[.]com, and connects to Tailscale control services at controlplane[.]tailscale[.]com and login[.]tailscale[.]com. It exposes sshd on 0.0.0.0:6800, enables forwarding and reverse tunnels, disables SSH host-key verification, sources TAILSCALE_AUTH_KEY from $SSHDIR/.env, and may recursively delete /root/.ssh before replacing it. No clear malware payload or unrelated data theft is visible, but the remote-access and destructive filesystem behavior warrant a security warning and review before deployment.

Confidence: 94%Severity: 68%
Audit Metadata
Analyzed At
Nov 2, 2026, 12:08 PM
Package URL
pkg:socket/skills-sh/skynight137%2Fskills%2Fmuse%2F@4dc0634684734788dc894eb5b413bdb7903585b600c991d01ae31792b1d62583