Security audit
Security checks across malware telemetry and agentic risk
This skill is a cloud media-analysis and report-history tool for pet videos, but it also silently creates or reuses identities, stores tokens locally, and is advertised more like an automatic soothing-device trigger than the code supports.
Review carefully before installing. Use this only if you are comfortable sending pet-camera videos or video URLs to the configured cloud service, having cloud report history tied to an automatically selected local identity, and storing service tokens in a local SQLite database. Prefer explicit user confirmation before uploads or history lookup, avoid private/internal URLs, and do not use it with sensitive home footage unless the publisher clarifies retention, deletion, identity, and token handling.
if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
if offset:
query = query.offset(offset)if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
return query.scalar()
finally:"source": ConstantEnum.DEFAULT__SKILL_HUB_NAME
}
try:
_response = requests.post(_url, json=_data)
if _response.status_code == 200:
_response_json = _response.json()
if _response_json and _response_json.get("success"):|---|---| | 📚 文档读取 | 仅在需要时读取参考文档，保持上下文简洁 | | 📁 格式支持 | 支持格式：mp4/avi/mov，最大 10MB | | 🧑⚖️ 结果性质 | 本分析结果仅供智能触发参考，实际安抚效果因宠物个体差异有所不同 | | 🚫 脚本限制 | 禁止临时生成脚本，只能用技能本身的脚本 | | 🌐 网络地址 | 传入的网路地址参数，不需要下载本地，默认地址都是公网地址，api 服务会自动下载 | | 📜 报告输出 | 当显示历史分析报告清单的时候，从接口返回 json 数据中提取字段 作为超链接地址，且自动转化为如下 Markdown |
--- name: "pet-calming-trigger-analysis" description: "Automatically triggers soothing mechanisms (playing relaxing sounds, activating laser toys) when pet anxiety, howling, or prolonged loneliness is detected; a smart companion for pet care. | 宠物安抚触发技能，检测到宠物焦虑、嚎叫、长时间孤独时，自动触发安抚机制（播放舒缓音效、开启激光逗宠），智能宠物陪伴好帮手" version: "1.0.6" license: "MIT-0" ---
65/65 vendors flagged this skill as clean.
Detected: suspicious.install_untrusted_source