Security audit
Security checks across malware telemetry and agentic risk
The skill’s pet-video analysis is coherent, but it silently creates or reuses an account identity, stores tokens locally, and sends videos, URLs, and history requests to cloud APIs.
Install only if you are comfortable with pet/home videos or video URLs being processed by the publisher’s cloud service, with the skill automatically creating or reusing an account identity, and with access tokens being stored in a local workspace database. Avoid private camera footage unless you trust the service’s retention and access controls, and review or clear the workspace data directory if you uninstall.
"source": ConstantEnum.DEFAULT__SKILL_HUB_NAME
}
try:
_response = requests.post(_url, json=_data)
if _response.status_code == 200:
_response_json = _response.json()
if _response_json and _response_json.get("success"):65/65 vendors flagged this skill as clean.
Detected: suspicious.install_untrusted_source