skills/netease/skills/netease-music-cli/Socket

netease-music-cli

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's stated purpose is music control, but the referenced CLI has evidence of being an unrelated NodeSource package, while the skill also forwards NetEase API credentials and conversation summaries into that CLI and relies on an unreviewed setup skill. This combination is not proportionate or internally consistent with a normal music-control skill.

Confidence: 89%Severity: 88%

Audit Metadata

Analyzed At

Mar 23, 2026, 08:55 AM

Package URL

pkg:socket/skills-sh/NetEase%2Fskills%2Fnetease-music-cli%2F@73313e134e98e0219efbc5df9a4894eb5c2656d5