Security checks across malware telemetry and agentic risk
The skill has a coherent proof-management purpose, but it broadly scans sensitive business data, can send summaries to Telegram, and writes outside its declared workspace boundaries.
Install only after reviewing the scan scope and Telegram behavior. Use a dedicated Telegram bot/chat, avoid placing sensitive client or financial data in scanned directories unless intended, disable or avoid scheduled syncs until tested, and verify cross-skill writes before letting it deploy proof into brand, voice, funnel, or outreach workflows.
data=payload.encode(),
headers={"Content-Type": "application/json"}
)
with urllib.request.urlopen(req, timeout=10):
pass
print(" ✅ Telegram sent")
except Exception as e:64/64 vendors flagged this skill as clean.