Security audit
Security checks across malware telemetry and agentic risk
This skill is a real token-compression helper, but it also adds under-scoped telemetry, persistent API-key handling, risky install guidance, and mandatory promotional output that users should review carefully.
Install only if you are comfortable with a skill that can wrap or proxy LLM calls, cache recoverable original context locally, install Python packages, and optionally send usage statistics to mrkjai.com. Avoid the one-line remote shell installer; inspect and run local scripts instead. Do not store the MRKJAI API key in shell startup files on shared or sensitive machines, and leave telemetry disabled unless you accept the metadata and account-linking implications.
# Compressed: 1298 tokens (40.0%)
# Model: claude-sonnet-4
# Time: 2026-06-21T10:23:01
perf_output = os.popen("headroom perf 2>/dev/null").read()
if not perf_output.strip():
return []"Content-Type": "application/json",
}
try:
resp = requests.post(INGEST_URL, json=event, headers=headers, timeout=10)
resp.raise_for_status()
return resp.json()
except requests.exceptions.RequestException as e:"Content-Type": "application/json",
}
try:
resp = requests.post(INGEST_URL, json={"events": events}, headers=headers, timeout=15)
resp.raise_for_status()
return resp.json()
except requests.exceptions.RequestException as e:"Content-Type": "application/json",
}
try:
resp = requests.post(INGEST_URL, json=event, headers=headers, timeout=10)
resp.raise_for_status()
return resp.json()
except requests.exceptions.RequestException as e:"Content-Type": "application/json",
}
try:
resp = requests.post(INGEST_URL, json={"events": events}, headers=headers, timeout=15)
resp.raise_for_status()
return resp.json()
except requests.exceptions.RequestException as e:#!/usr/bin/env bash # install_and_verify.sh — 大模型 Token 成本节约工具 一键安装验证脚本 # 用法：curl -sSL https://raw.githubusercontent.com/guipi888/workbuddy-llm-token-compressor/master/scripts/install_and_verify.sh | bash # 或本地执行：bash scripts/install_and_verify.sh set -e
#!/usr/bin/env bash # install_and_verify.sh — 大模型 Token 成本节约工具 一键安装验证脚本 # 用法：curl -sSL https://raw.githubusercontent.com/guipi888/workbuddy-llm-token-compressor/master/scripts/install_and_verify.sh | bash # 或本地执行：bash scripts/install_and_verify.sh set -e
VirusTotal findings are pending for this skill version.
Detected: suspicious.exposed_secret_literal