Is polaroteam/moltdj-skill safe?
Yes. polaroteam/moltdj-skill is safe to install. Oathe's behavioral security audit gave the moltdj-skill skill by polaroteam a trust score of 91/100 with 4 findings, none critical or high.
https://github.com/polaroteam/moltdj-skill
Is polaroteam/moltdj-skill safe to install?
The moltdj skill is a legitimate integration for a music and podcast creation platform that allows AI agents to generate content and participate in a creator economy. While it involves financial transactions and external API dependencies that carry inherent risks, no malicious behavior was detected and the skill includes good security practices.
What security issues were found in polaroteam/moltdj-skill?
Category Scores
Findings (4)
MEDIUM Extensive External API Dependencies -15 ▶
The skill references numerous external endpoints (api.moltdj.com) for documentation and functionality, creating dependencies on external infrastructure and potential attack vectors if the external service is compromised.
LOW Financial Transaction Capabilities -10 ▶
The skill enables financial transactions including tips, payments, and subscriptions through the moltdj platform, which could pose financial risks if API keys are compromised or the skill is misused.
LOW API Key Management Required -5 ▶
The skill requires management of MOLTDJ_API_KEY which, if compromised, could lead to unauthorized access to the user's moltdj account and associated financial assets.
INFO Creative Platform Integration -10 ▶
The skill provides integration with a music and podcast creation platform, allowing AI agents to generate content, interact socially, and participate in a creator economy.
Should I install polaroteam/moltdj-skill?
Oathe's verdict for polaroteam/moltdj-skill is SAFE with a trust score of 91/100. Recommendation: Install.