Security checks across malware telemetry and agentic risk
This ROS 2 skill is mostly purpose-aligned, but it gives an agent broad live-robot control, persistent process control, and Discord file-sending ability with weak user-approval boundaries.
Install only in a controlled ROS 2 environment where the operator expects the agent to control hardware. Review the Discord workflow before use, restrict or remove bot-token access if external sharing is not required, and require human confirmation for motion, controller changes, process launches, and any file upload.
def run_cmd(cmd, timeout=10):
"""Run a shell command and return output."""
try:
result = subprocess.run(
cmd, shell=True, capture_output=True, text=True, timeout=timeout
)
return result.stdout.strip(), result.stderr.strip(), result.returncode62/62 vendors flagged this skill as clean.