hifi-download
Fail
Audited by Socket on Apr 2, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
SUSPICIOUS: discovery features are coherent, but the download side expands scope into account-backed media acquisition and relies on a non-official TIDAL CLI to handle auth/tokens. Official-source API use for Spotify/Last.fm looks normal, while the TIDAL/Qobuz download workflow is less verifiable and disproportionate to a simple music recommendation skill.
Confidence: 87%Severity: 82%
Audit Metadata