skills/netease/skills/netease-music-assistant/Socket

netease-music-assistant

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the music-assistant purpose is mostly coherent, but its footprint is enlarged by unresolved transitive dependencies, persistent cron automation, and external IM forwarding through OpenClaw. The main concern is trust and scope expansion rather than confirmed malware.

Confidence: 86%Severity: 76%

Audit Metadata

Analyzed At

Mar 23, 2026, 08:56 AM

Package URL

pkg:socket/skills-sh/NetEase%2Fskills%2Fnetease-music-assistant%2F@6dd3a9fda6efd6ceab038cc172130e8732a14687