Security audit
Package Tracker
Security checks across malware telemetry and agentic risk
Overview
This package-tracking skill appears to match its purpose, but it needs a 17track key, installs Python packages, saves shipment history locally, and optional scheduled checks can send updates to messaging channels.
Before installing, review the full tracker.py file because the supplied artifact is truncated, then run setup.sh only if you are comfortable installing its Python dependencies. Use a dedicated 17track API key, keep scripts/.env private, avoid sensitive package descriptions, and enable cron or heartbeat checks only if you want ongoing background package polling.
SkillSpector
By NVIDIA
SkillSpector findings are pending for this release.
VirusTotal
56/56 vendors flagged this skill as clean.