Skill
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill’s files, runtime instructions, and optional environment overrides are consistent with its stated purpose: it sends Douyin/Xiaohongshu links to the publisher-operated API (https://linktranscriber.store) to obtain a summary, a todo list, and a recommended reminder time, and it does not request credentials or install arbitrary software.
This skill is internally consistent with its promise, but it sends any user-provided link to the publisher-hosted API (default https://linktranscriber.store). Before installing, decide whether you’re comfortable sending those links and their contents to that external service. If you need stronger privacy or control, consider asking the publisher how they store/transmit data or self-host the upstream service (the repo contains developer deployment notes and example scripts). Also note the skill’s default behavior to execute immediately when given a supported link (no extra confirmation) and to relay backend-provided comment candidates verbatim — both of which may have privacy or operational consequences for your workflow.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.