Security audit
Security checks across malware telemetry and agentic risk
This is a functional Discord CLI skill, but it can recover and store a Discord user-session token and build broad local message archives, so it should be reviewed carefully before use.
Install only if you intentionally want a local Discord archiver that uses your personal Discord user token. Run auth and sync commands only on accounts and machines you control, avoid saving tokens to a project .env, review what channels sync-all would collect, and do not use AI analysis on private messages unless you are comfortable sending that message content to the configured AI provider.
def save_token_to_env(token: str, env_path: Path | None = None) -> Path:
"""Save token to .env file."""
if env_path is None:
env_path = Path.cwd() / ".env"def save_token_to_env(token: str, env_path: Path | None = None) -> Path:
"""Save token to .env file."""
if env_path is None:
env_path = Path.cwd() / ".env"
lines = []
token_found = False@cli.command("auth")
@click.option("--save", is_flag=True, help="Save found token to .env automatically")
def auth(save: bool):
"""Extract Discord token from local browser/Discord client."""
import httpxVirusTotal engine telemetry is currently malicious for this artifact.
No suspicious patterns detected.