Security checks across malware telemetry and agentic risk
This appears to be a real Jianying desktop automation skill, but it needs review because it can control the desktop, overwrite clipboard/text, save screenshots, and install a dependency.
Install only if you are comfortable letting this skill operate your Windows desktop while Jianying is open. Keep the target app focused, do not use the computer during automation, expect your clipboard and text fields to be overwritten, review any saved screenshots/temp files, and require explicit approval before dependency installation or skill-file self-modification.
# 使用powershell设置剪贴板
print('设置剪贴板内容...')
ps_cmd = f'Get-Content -Path "{tmp_path}" -Encoding UTF8 -Raw | Set-Clipboard'
result = subprocess.run(['powershell', '-Command', ps_cmd], capture_output=True, text=True)
if result.returncode != 0:
print(f'PowerShell错误: {result.stderr}')return pyautogui
except ImportError:
print("正在安装 pyautogui...")
subprocess.check_call([sys.executable, "-m", "pip", "install", "pyautogui", "-q"])
import pyautogui
return pyautoguif.write(script_text)
ps_cmd = f'Get-Content -Path "{tmp_path}" -Encoding UTF8 -Raw | Set-Clipboard'
result = subprocess.run(['powershell', '-Command', ps_cmd], capture_output=True, text=True, encoding='utf-8', errors='replace')
print(f"Clipboard set: return code {result.returncode}")
if result.stderr:
print(f"Stderr: {result.stderr[:200]}")tmp = os.path.join(skill_dir, 'temp_script.txt')
with open(tmp, 'w', encoding='utf-8') as f:
f.write(script_text)
subprocess.run(['powershell', '-Command', f'Get-Content -Path "{tmp}" -Encoding UTF8 -Raw | Set-Clipboard'], capture_output=True)
time.sleep(0.5)
pyautogui.hotkey('ctrl', 'v')
time.sleep(3)67/67 vendors flagged this skill as clean.