music-assistant

SUSPICIOUS. The stated purpose is coherent with music-control capabilities and the declared data flow points to the user's own Home Assistant environment, but the skill's core ha-ma executable is not installable from any verified source in the provided evidence. Because that unverifiable CLI would receive a long-lived Home Assistant token, the skill carries high security risk despite otherwise plausible scope.