Security checks across malware telemetry and agentic risk
This report-writing skill appears purpose-aligned, but it deserves Review because it can automatically write and overwrite local report state, spawn multi-agent work, run external Mermaid tooling, and optionally send notifications outside the local machine.
Install only if you are comfortable with an automated report pipeline that creates and modifies local files and may invoke external tools. Use a dedicated work directory, avoid confidential reference material unless local retention is acceptable, keep notifications on the default log channel unless external sharing is intended, and avoid Mermaid/npx rendering unless you trust the local Node/npm environment.
if os.path.exists(puppeteer_cfg):
cmd += ['-p', puppeteer_cfg]
import subprocess
subprocess.run(cmd, capture_output=True, text=True, timeout=30)
return os.path.exists(out_path)
except Exception:
return False67/67 vendors flagged this skill as clean.