Security audit
Security checks across malware telemetry and agentic risk
The skill is mostly a disclosed summary and handoff tool, but its optional installer uses unsafe remote shell installation and a destructive update fallback that users should review before installing.
Review or avoid the one-line installer. Prefer installing from a pinned release or inspected local copy, and do not run the Bash updater on an installation with local changes unless you have a backup. Runtime use is lower risk if you keep normal summaries read-only and only use '总结 保存' when you intentionally want a project-local .transfers handoff saved.
#!/bin/bash # summarize skill — multi-platform one-line installer # curl -sL https://raw.githubusercontent.com/gtbwpkwjnb-alt/summarize-skill/master/install.sh | bash set -e
owner: gtbwpkwjnb-alt
repo: summarize-skill
install:
bash: "curl -sL https://raw.githubusercontent.com/gtbwpkwjnb-alt/summarize-skill/master/scripts/install.sh | bash"
powershell: "iwr https://raw.githubusercontent.com/gtbwpkwjnb-alt/summarize-skill/master/scripts/install.ps1 | iex"echo " Already installed at $INSTALL_DIR"
echo "🔄 Updating to latest version..."
cd "$INSTALL_DIR"
git pull --rebase 2>/dev/null || { cd "$HOME" && rm -rf "$INSTALL_DIR" && git clone "$REPO_SSH" "$INSTALL_DIR" 2>/dev/null || git clone "$REPO_HTTPS" "$INSTALL_DIR"; }
else
echo " Cloning into $INSTALL_DIR ..."
mkdir -p "$(dirname "$INSTALL_DIR")"echo " Already installed at $INSTALL_DIR"
echo "🔄 Updating to latest version..."
cd "$INSTALL_DIR"
git pull --rebase 2>/dev/null || { cd "$HOME" && rm -rf "$INSTALL_DIR" && git clone "$REPO_SSH" "$INSTALL_DIR" 2>/dev/null || git clone "$REPO_HTTPS" "$INSTALL_DIR"; }
else
echo " Cloning into $INSTALL_DIR ..."
mkdir -p "$(dirname "$INSTALL_DIR")"#!/bin/bash # summarize skill — multi-platform one-line installer # curl -sL https://raw.githubusercontent.com/gtbwpkwjnb-alt/summarize-skill/master/install.sh | bash set -e
VirusTotal findings are pending for this skill version.
No suspicious patterns detected.