Summary
music-toolkit v1.0.2 was classified as CRITICAL RISK with a risk score of 97. Sigil detected 8 findings across 13 files, covering phases including provenance, code patterns. Review the findings below before installing this package.
Package description: 当用户想要【录制电脑声音、内录系统音频、捕获声卡输出、AI智能分轨切歌、自动裁剪录音前后空白/杂音】时自动触发。 专门用于对系统播放的音乐、串烧、整张专辑、网课等音频进行高保真内录，并提供基础静音切分与基于 PyTorch 的 AI 音乐结构分析分轨功能。 用户只需提供录制时长（分钟），即可自动启动后台录音，结束后按要求精细裁剪并导出。 常见触发口语： - “帮我录音 5 分钟” - “录...
v1.0.2
19 July 2026, 11:40 UTC
by Sigil Bot
Risk Score
97
Findings
8
Files Scanned
13
Provenance
Findings by Phase
Phase Ordering
Phases are ordered by criticality, with the most dangerous at the top. Click any phase header to expand or collapse its findings. Critical phases are expanded by default.
Badge
Markdown
[](https://sigilsec.ai/scans/ECE08925-8C97-4EA2-A1F6-297A4E68472B)HTML
<a href="https://sigilsec.ai/scans/ECE08925-8C97-4EA2-A1F6-297A4E68472B"><img src="https://sigilsec.ai/badge/clawhub/music-toolkit" alt="Sigil Scan"></a>Run This Scan Yourself
Scan your own packages
Run Sigil locally to audit any package before it touches your codebase.
Sigil Pro
Cloud scanning, AI investigation, web dashboard, and CI/CD integration. 14-day free trial.
Start free trial →Get threat intelligence and product updates
Security research, new threat signatures, and product updates. No spam.
Other clawhub scans
Believe this result is incorrect? Request a review or see our Terms of Service and Methodology.