Security audit
Security checks across malware telemetry and agentic risk
This package-detection skill sends surveillance media and report queries to remote services while automatically creating and reusing local identity state, with several under-disclosed or mismatched behaviors users should review first.
Review before installing. Use this only if you are comfortable with surveillance images/videos and report history going to the configured remote service, automatic local identity creation, token storage in the workspace data directory, and possible payment prompts. The publisher should add explicit privacy/permissions disclosure, remove dev/private HTTP endpoints from the published config, and require user confirmation for history retrieval and account provisioning.
if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
if offset:
query = query.offset(offset)if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
return query.scalar()
finally:"source": ConstantEnum.DEFAULT__SKILL_HUB_NAME
}
try:
_response = requests.post(_url, json=_data)
if _response.status_code == 200:
_response_json = _response.json()
if _response_json and _response_json.get("success"):VirusTotal findings are pending for this skill version.
Detected: suspicious.install_untrusted_source