Security audit
Security checks across malware telemetry and agentic risk
This Pinterest skill mostly does what it says, but it needs review because its helper script can install software at runtime and it handles account tokens and scraped media with limited guardrails.
Review before installing, especially if you will run the Python helper. Install dependencies deliberately in a controlled environment instead of relying on the script's automatic pip install. Use only read-only Pinterest scopes, protect tokens and app secrets, and send media or screenshots only when the user clearly requested that Pinterest content.
except ImportError:
print("Installing httpx...")
import subprocess
subprocess.check_call([sys.executable, "-m", "pip", "install", "httpx", "-q"])
import httpx65/65 vendors flagged this skill as clean.
No suspicious patterns detected.