Creative Inspiration Hub
Security checks across malware telemetry and agentic risk
Overview
The skill appears to do what it claims (a local, mock-data creative ideation helper), asks for no credentials, makes no network calls, and contains only simple local Python code — nothing disproportionate or covert was found.
This skill is a local, mock-data creative ideation helper implemented in Python and requires no credentials or external services. Before installing: (1) be aware it returns mock/sample data (SKILL.md says 'MVP 骨架' and handler.py returns synthetic outputs), so don't expect production-quality analyses; (2) packaging is slightly sloppy (package.json points to a non-existent index.js and version fields differ) — this is not a security red flag but indicates the author may not have fully polished the package; (3) run the included tests (scripts/test.py) in a safe environment to verify behavior; and (4) avoid sending sensitive secrets or private data to the skill (even though it doesn't exfiltrate or call external networks, it's best practice). If you need production-grade integrations (real data sources, persisting outputs, or networked features), request or review an updated version that documents external dependencies and includes a clear install spec.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings