skills/minimax-ai/skills/buddy-sings/Socket

buddy-sings

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's stated purpose is mostly coherent, but it overreaches by automatically scanning personal memory and git context for a playful music task, and it relies on an unreviewed dependent skill for all real generation/network behavior. Main risk is transitive trust and hidden data flow, not confirmed malware.

Confidence: 83%Severity: 62%

Audit Metadata

Analyzed At

Apr 10, 2026, 05:47 AM

Package URL

pkg:socket/skills-sh/minimax-ai%2Fskills%2Fbuddy-sings%2F@100ecd7502ed3510daab76b5aab19ac9c37fbd6a