Security audit
Security checks across malware telemetry and agentic risk
This skill appears to automate Windows software installs, but it can run discovered installers and logs remote-access credentials, so it needs careful review before use.
Install only if you are comfortable with a skill that can run software installers and click through install dialogs. Use exact trusted installer paths, avoid bulk install requests, remove or redact password logging, avoid shell-based execution, and require explicit confirmation for each package before use.
logging.info("静默安装失败，尝试 GUI 自动化...")
try:
subprocess.Popen(f'"{installer_path}"')
time.sleep(3)
self.handle_installation_gui()
return {"success": True, "message": "EXE 包通过 GUI 自动化安装"}try:
logging.info(f"执行命令：{cmd}")
result = subprocess.run(cmd, shell=True, timeout=timeout, capture_output=True, text=True)
if result.returncode == 0:
logging.info(f"{pkg_type}包安装成功")try:
logging.info(f"执行命令：{cmd}")
result = subprocess.run(cmd, shell=True, timeout=timeout, capture_output=True, text=True)
if result.returncode == 0:
logging.info(f"{pkg_type}包安装成功")pyautogui>=0.9.53 pygetwindow>=0.0.9 pywinauto>=0.6.8 Pillow>=9.0.0
pyautogui>=0.9.53 pygetwindow>=0.0.9 pywinauto>=0.6.8 Pillow>=9.0.0
pyautogui>=0.9.53 pygetwindow>=0.0.9 pywinauto>=0.6.8 Pillow>=9.0.0
pyautogui>=0.9.53 pygetwindow>=0.0.9 pywinauto>=0.6.8 Pillow>=9.0.0
try:
logging.info(f"执行命令：{cmd}")
result = subprocess.run(cmd, shell=True, timeout=timeout, capture_output=True, text=True)
if result.returncode == 0:
logging.info(f"{pkg_type}包安装成功")VirusTotal findings are pending for this skill version.
No suspicious patterns detected.