Security audit
Security checks across malware telemetry and agentic risk
This skill should be reviewed carefully because its docs and code disagree, and it sends loan/customer inputs plus a user key to an insecure remote HTTP service.
Install only if you are comfortable with a third-party pay-per-use backend receiving the prompt data. Do not enter real customer PII, account numbers, contact lists, or confidential financial records. The publisher should fix the documentation/code mismatch, use HTTPS with a named trusted host, and clearly disclose exactly what data is sent and how the service key is used.
if method == "GET":
resp = requests.get(url, headers=h, params=data or {}, timeout=30)
else:
resp = requests.post(url, headers=h, json=data or {}, timeout=60)
if resp.status_code >= 400:
try:
err = resp.json()VirusTotal findings are pending for this skill version.
No suspicious patterns detected.