Security audit
Security checks across malware telemetry and agentic risk
This skill is a broadly triggered AGI companion that also exposes powerful local filesystem, process, environment, and shell-command capabilities without tight scoping or approval gates.
Install only if you intentionally want this skill to act as a local system tool. Treat it as capable of reading, changing, or deleting files, exposing environment secrets, killing processes, and running shell commands. Use it in a disposable or sandboxed workspace unless you can add strict path limits, command allowlists, and explicit approval for destructive actions.
shell = "cmd" if os.name == "nt" else "sh"
flag = "/C" if os.name == "nt" else "-c"
try:
cp = subprocess.run(
[shell, flag, cmd],
capture_output=True, timeout=timeout,
)kw=pkwargs,
)
try:
proc = subprocess.run(
[sys.executable, "-c", script],
capture_output=True,
timeout=15,# —— 子进程调用：spawn 失败/超时视为能力层崩溃，转保命层 ——
try:
proc = subprocess.run(cmd, capture_output=True, timeout=120)
except (subprocess.TimeoutExpired, OSError) as e:
logger.warning("[toolnode] capability layer crashed (%s: %s), falling back to BusyBox (trace=%s)",
type(e).__name__, e, trace_id)timeout = params.get("timeout", 60)
cwd = params.get("cwd")
try:
proc = subprocess.run(cmd, shell=True, capture_output=True,
timeout=timeout, cwd=cwd)
stdout = _decode(proc.stdout)
stderr = _decode(proc.stderr)sig = params.get("signal", 15)
try:
if sys.platform.startswith("win"):
subprocess.run(["taskkill", "/PID", str(pid), "/F"], capture_output=True, timeout=10)
else:
os.kill(pid, sig)
return {"pid": pid, "killed": True}async def register_server(self, server_url: str):
"""注册 MCP Server"""
# 连接服务器
response = await requests.post(
f"{server_url}/tools/list",
json={}
)server_url = self.servers[tool_name]
response = await requests.post(
f"{server_url}/tools/call",
json={
"name": tool_name,if op == "env":
key = params.get("key")
if key:
return {"key": key, "value": os.environ.get(key)}
return {"count": len(os.environ), "sample_keys": list(os.environ.keys())[:20]}
if op == "all":
return {shell = "cmd" if os.name == "nt" else "sh"
flag = "/C" if os.name == "nt" else "-c"
try:
cp = subprocess.run(
[shell, flag, cmd],
capture_output=True, timeout=timeout,
)kw=pkwargs,
)
try:
proc = subprocess.run(
[sys.executable, "-c", script],
capture_output=True,
timeout=15,# —— 子进程调用：spawn 失败/超时视为能力层崩溃，转保命层 ——
try:
proc = subprocess.run(cmd, capture_output=True, timeout=120)
except (subprocess.TimeoutExpired, OSError) as e:
logger.warning("[toolnode] capability layer crashed (%s: %s), falling back to BusyBox (trace=%s)",
type(e).__name__, e, trace_id)timeout = params.get("timeout", 60)
cwd = params.get("cwd")
try:
proc = subprocess.run(cmd, shell=True, capture_output=True,
timeout=timeout, cwd=cwd)
stdout = _decode(proc.stdout)
stderr = _decode(proc.stderr) k 0�
l H�
m P�
n X�
o `�
p h�
q p� k 0�
l H�
m P�
n X�
o `�
p h�
q p� � �
� �
� �
� �
� (�
� 0�
� 8�timeout = params.get("timeout", 60)
cwd = params.get("cwd")
try:
proc = subprocess.run(cmd, shell=True, capture_output=True,
timeout=timeout, cwd=cwd)
stdout = _decode(proc.stdout)
stderr = _decode(proc.stderr)VirusTotal findings are pending for this skill version.
Detected: suspicious.dynamic_code_execution