Security audit
Security checks across malware telemetry and agentic risk
The skill can perform useful Suricata alert triage, but its local-only privacy claims conflict with documented Telegram reporting, credential use, memory writes, and daily scheduling.
Review before installing. Use local-only portions cautiously, avoid making security logs world-readable, do not enable Telegram delivery unless you are comfortable exporting IDS findings to a third party, and only add the cron job if you want recurring report transmission and local memory retention.
```python
# After building the report string above:
import os, requests
requests.post(
f"https://api.telegram.org/bot{os.environ['TELEGRAM_BOT_TOKEN']}/sendMessage",
json={"chat_id": os.environ['TELEGRAM_CHAT_ID'], "text": report},
timeout=10# After building the report string above:
import os, requests
requests.post(
f"https://api.telegram.org/bot{os.environ['TELEGRAM_BOT_TOKEN']}/sendMessage",
json={"chat_id": os.environ['TELEGRAM_CHAT_ID'], "text": report},
timeout=10
)# After building the report string above:
import os, requests
requests.post(
f"https://api.telegram.org/bot{os.environ['TELEGRAM_BOT_TOKEN']}/sendMessage",
json={"chat_id": os.environ['TELEGRAM_CHAT_ID'], "text": report},
timeout=10
)64/64 vendors flagged this skill as clean.
No suspicious patterns detected.