skills/zju-real/easel/ai-music/Socket

ai-music

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s main capability matches its purpose, and the DashScope path looks coherent and official. The main issue is the built-in support for arbitrary 'suno-compatible' third-party gateways: it forwards prompts, lyrics, and MUSIC_API_KEY to unspecified endpoints, making data flow and credential trust unverifiable from the skill alone.

Confidence: 88%Severity: 62%

Audit Metadata

Analyzed At

Oct 16, 2026, 04:18 AM

Package URL

pkg:socket/skills-sh/zju-real%2Feasel%2Fai-music%2F@a24ab10175f473c14afe4694d7aa64678ef40f0b0ade44df17c009cde3b06679