Security checks across malware telemetry and agentic risk
This skill is mostly a local rebranding utility, but it needs Review because optional validation can execute local Python code and the actual file-processing scope is broader than the docs describe.
Install only if you are comfortable with a local tool that reads and rewrites a whole source tree into a destination. Use it first with --dry-run and a clean destination directory. Do not pass --validator, and do not run validation/tests, on untrusted projects unless you isolate the run in a container or VM.
def validate(dst_dir: Path, validator: Path) -> bool:
"""Run a custom validator on dst_dir. Returns True if it passes."""
try:
result = subprocess.run(
[sys.executable, str(validator), str(dst_dir)],
capture_output=True, text=True, timeout=30
)def run_tests(dst_dir: Path) -> bool:
"""Run all test_*.py in dst_dir. Returns True if all OK."""
try:
result = subprocess.run(
[sys.executable, "-m", "unittest", "discover", "-s", str(dst_dir), "-p", "test_*.py"],
capture_output=True, text=True, timeout=60
)65/65 vendors flagged this skill as clean.