Niche Research Scout
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's description (produce a Telegram-delivered niche research report) is plausible, but the instructions reference running a missing Python script, require network scraping and Telegram delivery without declaring the needed credentials or providing code — these inconsistencies merit caution.
This skill is an instruction template rather than a runnable package — it tells you what to do (scrape/search, build a PDF, and send to Telegram) but doesn't include the Python script or declare the Telegram credentials needed. Before installing or trusting it: 1) Ask the author for the actual runnable code (niche_scout.py) and review it — do not run unknown scripts. 2) Confirm how Telegram delivery is implemented and what credentials (bot token, chat id) are required; never paste secrets into a skill without verifying code. 3) If the skill will scrape Instagram/TikTok, be aware of platform ToS and rate limits; ask how data is gathered (public web scraping vs. API) and whether login/API keys are needed. 4) Because the SKILL.md omits required env vars and points to a missing script, treat this as incomplete/untested rather than ready-to-run. If you need it to run automatically, request a complete install spec and a security review of the code; otherwise prefer a human-supervised implementation.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.