Security audit
Security checks across malware telemetry and agentic risk
This loan-screening skill is purpose-aligned, but it can send sensitive applicant and batch CSV financial data to an external API without enough disclosure, consent controls, or endpoint safeguards.
Review before installing. Use this only with authorized customer data, configure the API URL to a trusted HTTPS endpoint, understand who operates the backend and how it stores data, and avoid batch uploads unless you have consent and a clear compliance process. The clean VirusTotal/static scan reduces malware concern, but it does not resolve the privacy and endpoint-governance issues.
req.add_header('X-API-Key', api_key)
try:
with urllib.request.urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode('utf-8'))
except urllib.error.HTTPError as e:
error_body = e.read().decode('utf-8', errors='replace')65/65 vendors flagged this skill as clean.
No suspicious patterns detected.