Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- grabber-enhanced.js:196
Security audit
闲鱼数据抓取
Security checks across malware telemetry and agentic risk
Overview
Review before installing: this skill uses stealth web scraping, account cookies, external uploads, scheduled background jobs, and unsafe shell-command construction.
Install only if you are comfortable with automated scraping and external uploads. Avoid curl|bash, inspect the code first, disable cron and upload unless needed, use a dedicated low-privilege Gitee token, avoid personal Xianyu cookies, and require fixes for the shell-command injection issue before using untrusted keywords.
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.dangerous_exec, suspicious.destructive_delete_command
Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- grabber.js:163
Documentation contains a destructive delete command without an explicit confirmation gate.
Warn
- Code
- suspicious.destructive_delete_command
- Location
- INSTALL.md:149