suno

Warn

Audited by Socket on Jul 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated music-generation purpose is coherent, but the real trust boundary is unresolved because the active integration file is absent and available evidence points to a likely third-party Suno API wrapper rather than verified same-org Suno endpoints. That creates moderate risk of credential/data forwarding beyond what the skill discloses, though there is no confirmed malware behavior in the provided content.

Confidence: 79%Severity: 62%
Audit Metadata
Analyzed At
Jul 18, 2026, 02:28 PM
Package URL
pkg:socket/skills-sh/social-media-skills%2Fskills%2Fsuno%2F@0259da2d924cb18fd9f1f50356f378b781bf31b9270b7bebea7a585c6f3108e8
Security Audit — socket — suno