Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward server traffic monitor with disclosed local vnstat usage and no evidence of hidden exfiltration, destructive behavior, or privilege escalation.
Install only if you want a Chinese-language traffic monitor for a server using vnstat on eth0 with a 2 TB monthly limit. Review the interface name and monthly limit before relying on reports, and treat the systemctl examples as manual administrative commands rather than automatic skill behavior.
The natural-language content of the skill is presented exclusively in Chinese, including usage instructions and operational notes. This can violate a language/locale policy when the skill forces a specific language without user opt-in and no region-specific justification is documented.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def get_vnstat_json():
"""Get traffic data from vnstat in JSON format."""
try:
result = subprocess.run(
["vnstat", "-i", INTERFACE, "--json", "m"],
capture_output=True,
text=True,
The user-facing report strings are hard-coded in Chinese, including the title, labels, and warning text. This enforces a specific language/locale without any opt-in, selection mechanism, or documented justification, which matches the language-policy violation criteria.