Search Listing Optimizer
Security checks across malware telemetry and agentic risk
Overview
The skill is internally consistent with its stated purpose (heuristic listing audits) and asks for no credentials or installs; I found minor implementation bugs but no signs of exfiltration or unrelated privileges.
This skill appears to do what it says: a heuristic, text-only audit that generates a markdown optimization brief and does not ask for credentials or install anything. Before installing or enabling it widely: 1) review the full handler.py (the provided snippet was truncated) to confirm there are no hidden network calls, file writes, or subprocess invocations; 2) run the included tests in a sandbox to verify behavior and to confirm the exported handle() function and output formatting; 3) be aware of a minor correctness issue (platform name vs. weight-key casing) that may make many attributes fall back to generic weights — this affects quality of advice but not security. If you plan to allow autonomous invocation, note that while this skill has no special privileges, any autonomous skill can act without a user prompt — enable it only if you trust its behavior and output.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings