Security audit
Security checks across malware telemetry and agentic risk
The skill is a real local calendar tool, but it includes an unauthenticated LAN-reachable web server and executable backup files that are broader than users may expect.
Review before installing. Use the skill only if you are comfortable with it storing schedule data locally, creating executable Windows backup files, and running a configuration web server. If you use the web UI, bind it to localhost only or firewall the port, and do not run generated .bat backups unless you trust and inspect them.
"""获取某天的排班时段（复制周一规则到二~五）"""
rules = load_scheduling_rules()
if weekday in rules and rules[weekday] is not None:
return rules[weekday]
if rules.get(0) and weekday in (1,2,3,4):
return rules[0]
# fallbackif weekday in rules and rules[weekday] is not None:
return rules[weekday]
if rules.get(0) and weekday in (1,2,3,4):
return rules[0]
# fallback
defs = DEFAULT_SCHEDULING.get(weekday, [])
return defs if defs is not None else DEFAULT_SCHEDULING.get(0, [])}
rules.append(rule)
save_auto_configs(rules)
return rule, f"自动化规则已添加: {name}"
def delete_auto_rule(rule_id: str) -> str:65/65 vendors flagged this skill as clean.
No suspicious patterns detected.