Security audit
Security checks across malware telemetry and agentic risk
The skill is coherent and not malicious, but it asks an agent to broadly inspect recent local AI session histories, which is sensitive enough that users should review the scope before installing.
Install only if you are comfortable letting the agent inspect recent AI session history across detected local tools. Before use, give a narrow permission statement naming the sources allowed or excluded, and do not approve external actions unless the exact channel, audience, message, account, cost, and timing are shown.
and `references/session-scan.md`. 2. First check the current conversation for an adequate explicit permission grant to inspect the rolling 14 days of accessible AI CLI and GUI session history. If one exists, record its scope and exclusions and use it without asking again. Otherwise, ask once and let the user narrow or exclude sources. Never infer scan permission from historical sessions, old summaries, silence, or invocation of MoneyPrinter alone.
First check the current conversation for an adequate explicit permission grant to inspect the rolling 14-day window of accessible AI CLI and GUI session history. If one exists, record its scope and exclusions and use it without asking again. Otherwise, ask once and let the user narrow or exclude sources. Never infer scan permission from historical sessions, old summaries, silence, or invocation of MoneyPrinter alone. If permission is denied or narrowed,
VirusTotal findings are pending for this skill version.
No suspicious patterns detected.
