Security audit
elm
Security checks across malware telemetry and agentic risk
Overview
The skill is mostly transparent and consent-gated, but its listing-level description understates that it can use a logged-in Ele.me account and add items to your cart.
Only install or use this if you are comfortable letting the agent work inside your logged-in Ele.me session to prepare a cart. Do not provide passwords or verification codes, and always review the address, items, discounts, fees, total, and merchant before paying.
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.