Security checks across malware telemetry and agentic risk
This is a disclosed Coze-to-local bridge, but it exposes local file writes, clipboard access, and shell commands over a public tunnel with weak defaults and unsafe command handling.
Install only if you intentionally want a cloud Coze bot to reach your machine. Before running it, change the API key, avoid public exposure unless necessary, narrow allowed_paths and allowed_commands to the minimum, run it in a container or VM, and do not allow clipboard reads or file writes around sensitive data.
"error": f"Command '{base}' not allowed. Allowed: {', '.join(CONFIG['allowed_commands'])}",
}
try:
result = subprocess.run(
command, shell=True, capture_output=True, text=True, timeout=30
)
return {capture_output=True, timeout=5
)
elif sys.platform == "darwin":
subprocess.run(
["osascript", "-e", f'display notification "{message}" with title "{title}"'],
capture_output=True, timeout=5
)VirusTotal findings are pending for this skill version.