Security checks across malware telemetry and agentic risk
This article-collection skill largely does what it says, but it has enough high-impact automation and weak scoping that users should review it before installing.
Install only in a controlled Feishu workspace with a dedicated low-privilege app and trusted bot chats. Do not use it for confidential, internal, subscription-only, or personal links unless you are comfortable with article content and derived metadata being sent to DeepSeek and stored in Feishu. Before production use, tighten hostname validation, re-check or disable redirects, add an explicit command or authorization gate, document data handling, and remove or gate the full_access setup helper.
def fetch_wechat_article(url):
"""抓取微信公众号文章"""
try:
resp = requests.get(url, headers=HEADERS, timeout=15, allow_redirects=True)
resp.encoding = "utf-8"
html = resp.textdef fetch_toutiao_article(url):
"""抓取今日头条文章正文"""
try:
resp = requests.get(url, headers=HEADERS, timeout=15, allow_redirects=True)
resp.encoding = "utf-8"
html = resp.text66/66 vendors flagged this skill as clean.