Security checks across malware telemetry and agentic risk
This is a real benchmark runner, but it has enough high-impact, inconsistently disclosed behavior that users should review it before installing.
Install only if you want a GIGO cloud benchmark runner, not just a harmless resume helper. Expect local code execution, dependency installation, use of local gateway/profile/secret settings, network calls, result upload by default, and possible checkpoint reset; run it in an isolated workspace and use local/offline/skip-upload options or a different companion skill if you do not want cloud submission.
break
# 执行
try:
proc = subprocess.run(
cmd, shell=True, cwd=str(self.workdir),
capture_output=True, timeout=timeout, text=True,
)runner_path = workdir / "_cov_runner.py"
runner_path.write_text(runner)
try:
proc = subprocess.run(
[sys.executable, str(runner_path)],
cwd=str(workdir), capture_output=True, timeout=40, text=True,
)print("Type a Python expression:")
expr = input("> ")
result = eval(expr)
print("Result:", result)"-r",
str(status.requirements_path),
]
completed = subprocess.run(
command,
capture_output=True,
text=True,profile_argv = None
effective_argv = profile_argv if isinstance(profile_argv, list) else sys.argv[1:]
argv = [str(runtime_python), str(skill_root / "main.py"), *[str(item) for item in effective_argv]]
os.execve(str(runtime_python), argv, env)
def ensure_runtime(skill_root: Path, lang: str = "zh") -> RuntimeStatus:started = time.time()
try:
completed = subprocess.run(
command,
shell=True,
cwd=str(workdir),print("Type a Python expression:")
expr = input("> ")
result = eval(expr)
print("Result:", result)started = time.time()
try:
completed = subprocess.run(
command,
shell=True,
cwd=str(workdir),66/66 vendors flagged this skill as clean.