Security audit
Security checks across malware telemetry and agentic risk
This skill is a disclosed execution-workflow helper, but it adds broad command interception, persistent logging, optional background monitoring, and an unauthenticated local settings server that are under-declared and need careful review.
Install only if you specifically want a local execution-discipline framework that records task progress and command failures. Avoid enabling global mode or the exec wrapper unless you are comfortable with commands and outputs being routed through this skill and stored locally. Do not run the settings server while browsing untrusted websites, and review or restrict TRIPHASIC_HOME logs if commands may contain secrets.
try:
if sys.platform == "win32":
result = subprocess.run(
["cmd.exe", "/c", command_str],
capture_output=True,
text=True,shell_chars = {"|", "&&", "||", ">", "<", "$", "`", "~", ";", "(", "}"}
needs_shell = any(c in command_str for c in shell_chars)
if needs_shell:
result = subprocess.run(
["bash", "-c", command_str],
capture_output=True,
text=True,timeout=timeout,
)
else:
result = subprocess.run(
cmd_args,
capture_output=True,
text=True,65/65 vendors flagged this skill as clean.
No suspicious patterns detected.