MoodMusic Conversation-Based Music Recommendations
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This looks like a simple local mood-to-track-list recommender, with only a documentation mismatch about playlists and learning over time.
This appears safe to use as a local music recommendation helper. Be aware that the README contains outdated-sounding claims about generated playlists and learning preferences; based on the current SKILL.md and source, it should only return a searchable list of tracks.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may expect the skill to connect to Spotify/YouTube/Apple Music or remember preferences, but the reviewed artifacts show only local track-list recommendations.
The README advertises generated playlist links and preference learning, while SKILL.md and the source indicate no API credentials, no external music-service integration, and no persistence. This appears to be stale or inconsistent documentation rather than implemented risky behavior.
Spotify playlist: [generated link] ... **Genre preferences** — learns what you like over time ... **Playlist generation** — creates themed playlists
Treat this as a simple local recommendation skill; do not provide music-service credentials unless a future version clearly declares and scopes that integration.