Security checks across malware telemetry and agentic risk
The skill has a plausible child-safety purpose, but it sends sensitive minor-related media and identifiers to remote services while also auto-registering users and storing tokens locally with limited disclosure.
Review this before installing in any setting involving children. Only use it if you are comfortable sending monitoring footage, public media URLs, and user identifiers to the publisher's remote service, and verify how reports, tokens, and uploaded media are retained or deleted. Rotate or remove the bundled api-key and avoid using personal phone numbers as open-id unless the account and privacy model is clear.
if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
if offset:
query = query.offset(offset)if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
return query.scalar()
finally:64/64 vendors flagged this skill as clean.