Security audit
AllToken — Slash Commands
Security checks across malware telemetry and agentic risk
Overview
This appears to be a purpose-aligned AllToken command helper, but it uses an AllToken API key and runs local Python snippets that send user prompts to AllToken.
This skill looks reasonable if you want your agent to call AllToken from chat. Before installing, make sure you are comfortable providing an AllToken API key, sending selected prompts to AllToken, and allowing the agent to run the shown Python recipes for clearly intended AllToken commands.
VirusTotal
58/58 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
