← back to music-ingestion-publisher
SkillSpector · music-ingestion-publisher
independent scanner by NVIDIA · skill by zero-yx · how it works ↗
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.; Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
scanned 2026-08-22
Findings (2)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
flows/netease.md
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
flows/netease.md
What the verdicts mean
SkillSpector reports on SkillMD's shared five-tier scale. See how SkillSpector works ↗.
Overall severity LOW (risk score in the safe range)
Overall severity MEDIUM
Overall severity HIGH
Overall severity CRITICAL
Scan could not complete