Security audit
Security checks across malware telemetry and agentic risk
This emotion-monitoring skill is mostly purpose-aligned, but it auto-starts sensitive background monitoring and uses broad local process control that users should review before installing.
Install only if you are comfortable with a background emotion-monitoring service starting immediately, installing Python packages, reading local sensors, exposing emotion status on localhost port 8766, and opening periodic image windows. Review how to stop it first, and prefer a controlled environment until package pinning, local API access control, GUI session handling, and broad process-kill behavior are improved.
"""关闭所有 nebula 和 eog 进程"""
# 杀死所有 nebula.py 进程
try:
subprocess.run(['pkill', '-9', '-f', 'python3.*nebula.py'],
capture_output=True, timeout=2)
except:
pass# 杀死所有 eog 进程（显示 nebula 图片的）
try:
subprocess.run(['pkill', '-9', '-f', 'eog.*nebula_latest'],
capture_output=True, timeout=2)
except:
passif os.path.exists(install_script):
print("正在检查并安装依赖...")
result = subprocess.run([sys.executable, install_script])
return result.returncode == 0
return Falsef.write(response.content)
print(f"✅ 情绪星云图已保存: {output_path}")
# 自动打开图片
os.system(f"xdg-open {output_path} &")
return 0
else:
print(f"生成截图失败: HTTP {response.status_code}")def install_package(package):
print(f"正在安装 {package}...")
try:
subprocess.check_call([sys.executable, '-m', 'pip', 'install', package, '-q'])
print(f"✅ {package} 安装成功")
return True
except subprocess.CalledProcessError as e:env['DISPLAY'] = ':1'
env['XAUTHORITY'] = '/run/user/1000/gdm/Xauthority'
subprocess.Popen(
[sys.executable, nebula_script],
env=env,
stdout=subprocess.DEVNULL,print("🧹 清理旧进程...")
if SYSTEM == 'Linux':
try:
subprocess.run(['pkill', '-9', '-f', 'python3.*nebula.py'],
capture_output=True, timeout=2)
subprocess.run(['pkill', '-9', '-f', 'eog.*nebula_latest'],
capture_output=True, timeout=2)try:
subprocess.run(['pkill', '-9', '-f', 'python3.*nebula.py'],
capture_output=True, timeout=2)
subprocess.run(['pkill', '-9', '-f', 'eog.*nebula_latest'],
capture_output=True, timeout=2)
except:
passpass
elif SYSTEM == 'Windows':
try:
subprocess.run(['taskkill', '/F', '/IM', 'python.exe', '/FI', 'WINDOWTITLE eq nebula.py'],
capture_output=True)
except:
passinstall_script = os.path.join(script_dir, 'install.py')
if os.path.exists(install_script):
subprocess.check_call([sys.executable, install_script])
return True
return Falsecli_script = os.path.join(script_dir, 'emopad_cli.py')
if os.path.exists(cli_script):
subprocess.check_call([sys.executable, cli_script, 'start'])
return True
return False64/64 vendors flagged this skill as clean.
No suspicious patterns detected.