Security checks across static analysis, malware telemetry, and agentic risk
This skill appears to perform remote media analysis, but it also has under-disclosed identity, token storage, and mismatched generic health/video-analysis components that need review before installation.
Review this skill carefully before installing. Expect uploaded plant images/videos, remote URLs, and user identifiers such as open-id, username, or phone number to be sent to external lifeemergence services, with cloud history reports queried by that identity. Ask the publisher to replace the nonexistent yaml dependency, document privacy/retention and backend ownership, remove or secure plaintext token persistence, and align the generic health/video code and API docs with the plant-diagnosis purpose.
if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
if offset:
query = query.offset(offset)if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
return query.scalar()
finally:VirusTotal findings are pending for this skill version.