Security audit
Security checks across malware telemetry and agentic risk
This skill appears to do what it advertises, but it should be run in an isolated environment because it uses paid external APIs and can install Python packages.
Install and run this in a virtual environment, review dependencies before allowing runtime pip installation, and use dedicated low-privilege API keys with spending limits. Avoid putting sensitive personal or proprietary text into requests, since generated prompts and news-derived content are sent to external providers.
missing.append(pkg)
if missing:
print(f"[setup] Installing missing packages: {', '.join(missing)}")
subprocess.check_call(
[sys.executable, "-m", "pip", "install", "-q"] + missing
)58/58 vendors flagged this skill as clean.
No suspicious patterns detected.