Security audit
Security checks across malware telemetry and agentic risk
This skill is a disclosed business assistant that stores local CRM-style records and uses an optional licensed cloud service, so it is not malicious but should be used carefully with sensitive business data.
Install only if you are comfortable using a local business-memory database and, for paid features, sending the current command input plus license/device information to the vendor service. Do not store passwords, payment details, government IDs, unnecessary employee/customer private details, or trade secrets unless you have a clear business need and authorization. Use the official source and endpoint, protect the SQLite database, license cache, and exports, and avoid running it in an environment where someone else controls BOOSKILL_* environment variables.
headers={"Content-Type": "application/json"},
method="POST",
)
with urllib.request.urlopen(request, timeout=60) as response:
return json.loads(response.read().decode("utf-8"))64/64 vendors flagged this skill as clean.
No suspicious patterns detected.