Security audit
Security checks across malware telemetry and agentic risk
This quiz skill matches its general purpose, but it sends document text to a hardcoded cloud host and exposes quiz/student records through weakly protected web/admin flows.
Install only if you trust the operator of the hardcoded 118.196.5.240 service and are comfortable sending document contents and quiz data there. Do not use it with confidential documents or real student records until TLS verification, configurable endpoints, admin authentication, privacy notices, and safer install/deploy behavior are fixed; use a limited ARK key and avoid running the deploy/start tunnel scripts on sensitive hosts.
import qrcode
except ImportError:
print("正在安装 qrcode...", file=sys.stderr)
subprocess.run([sys.executable, "-m", "pip", "install", "qrcode", "pillow", "-q"])
import qrcode
if len(sys.argv) < 2:63/63 vendors flagged this skill as clean.
Detected: suspicious.dangerous_exec, suspicious.insecure_tls_verification