Security audit
Security checks across malware telemetry and agentic risk
This skill has a coherent archiving purpose, but it handles links, files, cookies, external uploads, and remote sheet writes with under-disclosed data flow and command-execution risks.
Install only if you are comfortable with the skill downloading content, using platform cookies when needed, sending some links to external services, uploading files to Tencent Docs, and writing persistent index records. Use it with non-sensitive content first, avoid personal session cookies unless necessary, and review or patch the shell execution and upload destination validation before trusting it with private or business data.
def run(cmd: str, timeout: int = 300) -> str:
r = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=timeout)
if r.returncode != 0:
raise RuntimeError(f"命令失败: {cmd[:80]}\n{r.stderr[:300]}")
return r.stdout.strip()def curl_put(url: str, path: str) -> None:
r = subprocess.run(
["curl.exe", "-X", "PUT", "--upload-file", path,
url, "-H", f"Content-Type: application/octet-stream",
"--max-time", "300", "-sS"],VirusTotal findings are pending for this skill version.
No suspicious patterns detected.