Security audit
help stay focus . currently only support chinese
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed focus-monitoring tool, but it needs review because it can screenshot the whole screen, store screen history, upload images to vision models, and installs by running an unpinned external script.
Install only if you are comfortable with your screen being periodically captured, stored locally, and sent to a vision-model provider. Before running it, review the external repository and start.bat, confirm which model/provider receives images, set a narrow screenshot interval and scope if possible, avoid sensitive windows during monitoring, and regularly delete or manage ~/Desktop/FocusOS_Data/.
SkillSpector
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.