Back to skill
Skillv3.3.3
Static analysis security
QQ音乐 · Deterministic local checks for risky code patterns and metadata mismatches.
Scanner verdict
SuspiciousApr 30, 2026, 5:10 AM
- Summary
- Detected: suspicious.dynamic_code_execution, suspicious.env_credential_access
- Reason codes
- suspicious.dynamic_code_executionsuspicious.env_credential_access
- Engine
- v2.4.5
Evidence
criticalsecurity-scan.sh:16
Dynamic code execution detected.
suspicious.dynamic_code_execution
criticalplayer/server-qqmusic.js:8
Environment variable access combined with network send.
suspicious.env_credential_access