Security audit
AI Plan Manager
Security checks across malware telemetry and agentic risk
Overview
The skill is a coherent plan manager, but it hardcodes a private plain-HTTP backend for API-key authenticated plan data despite documentation suggesting a configurable HTTPS service.
Treat this as a review-needed install. The plan-management functions appear coherent, but the hardcoded private HTTP API endpoint and under-declared API-key use should be resolved before you provide credentials or sensitive plan data.
VirusTotal
No VirusTotal findings
Static analysis
No suspicious patterns detected.