Security checks across malware telemetry and agentic risk
This skill does what it claims, but it can automatically collect, cache, and reproduce sensitive workplace chat messages with weak consent, scoping, and retention controls.
Install only if you trust the publisher and are authorized to process the Daxiang chats involved. Treat generated JSON and Markdown files as sensitive chat records, use a private output directory, avoid the generic trigger and cron unless ongoing collection is intended, and prefer redacted or aggregate-only reports where possible.
if messages:
# 保存到文件
DATA_DIR.mkdir(parents=True, exist_ok=True)
with open(message_file, "w", encoding="utf-8") as f:
json.dump(messages, f, ensure_ascii=False, indent=2)
print(f" 数据已保存到: {message_file}")
return messages66/66 vendors flagged this skill as clean.