Security audit
Security checks across malware telemetry and agentic risk
This legal-document helper is mostly purpose-aligned, but it can automatically create calendar items, scheduled reminders, emails, cloud OCR uploads, and software installs without consistently requiring clear user confirmation.
Install only if you are comfortable with a legal-workflow skill that can modify local case folders, create calendar entries and scheduled jobs, send QQ email reminders, and upload OCR images to a cloud OCR tool. Prefer running with --no-remind until you have reviewed the reminder plan, and do not use cloud OCR for privileged or highly confidential documents without explicit consent.
f = tempfile.NamedTemporaryFile(mode='w', suffix='.scpt', delete=False, encoding='utf-8')
f.write(script)
f.close()
result = subprocess.run(['osascript', f.name], capture_output=True, text=True)
os.remove(f.name)
if result.returncode != 0:
print(f" AppleScript error: {result.stderr}")f = tempfile.NamedTemporaryFile(mode='w', suffix='.scpt', delete=False, encoding='utf-8')
f.write(script)
f.close()
subprocess.run(['osascript', f.name], capture_output=True, text=True)
os.remove(f.name)t = title.replace('"', '\\"')
m = message.replace('"', '\\"')
script = f'display notification "{m}" with title "{t}" sound name "{sound}"'
result = subprocess.run(['osascript', '-e', script], capture_output=True, text=True)
if result.returncode != 0:
print(f" ⚠️ 系统通知弹出失败: {result.stderr}")
return FalseWrite-Output "OK"
'''
result = subprocess.run(
['powershell', '-NoProfile', '-Command', ps_script],
capture_output=True, text=True, timeout=30
)}}
Write-Output ($toDelete.Count)
'''
subprocess.run(
['powershell', '-NoProfile', '-Command', ps_script],
capture_output=True, text=True, timeout=30
)'/SD', alarm_dt.strftime('%Y-%m-%d'),
'/F'
]
subprocess.run(cmd, capture_output=True, text=True, timeout=15)
def _windows_schedule_email_script(uid_hash, label, alarm_dt, python_exe, script_dir, hour, minute):elif PLATFORM == 'windows':
t = _escape_ps(title); m = _escape_ps(message)
ps = f'Add-Type -AssemblyName System.Windows.Forms; [System.Windows.Forms.MessageBox]::Show("{m}","{t}")'
r = subprocess.run(['powershell','-NoProfile','-Command',ps], capture_output=True)
return r.returncode == 0
else:
print(f" ℹ️ {PLATFORM} 不支持即时弹窗（已生成桌面提醒文件兜底）")f' end tell\nend tell')
f = tempfile.NamedTemporaryFile(mode='w', suffix='.scpt', delete=False, encoding='utf-8')
f.write(script); f.close()
r = subprocess.run(['osascript', f.name], capture_output=True, text=True)
os.remove(f.name)
if r.returncode == 0:
print(f" 📅 Apple Calendar: {summary}")tr = f'"{python_exe}" {" ".join(f"{a}" for a in args)}'
cmd = ['schtasks','/Create','/SC','ONCE','/TN',label,'/TR',tr,
'/ST','09:00','/SD',alarm_date.strftime('%Y-%m-%d'),'/F']
r = subprocess.run(cmd, capture_output=True, text=True, timeout=15)
if r.returncode != 0:
print(f" ⚠️ schtasks 失败: {r.stderr}"); return False
print(f" ✅ schtasks: {label} → {alarm_date.strftime('%Y-%m-%d')} 09:00")script = f'display notification "{m}" with title "{t}"'
f = tempfile.NamedTemporaryFile(mode='w', suffix='.scpt', delete=False, encoding='utf-8')
f.write(script); f.close()
subprocess.run(['osascript', f.name], capture_output=True)
os.remove(f.name)
elif PLATFORM == 'windows':
t = _escape_ps(title); m = _escape_ps(message)elif PLATFORM == 'windows':
t = _escape_ps(title); m = _escape_ps(message)
ps = f'Add-Type -AssemblyName System.Windows.Forms; [System.Windows.Forms.MessageBox]::Show("{m}","{t}")'
subprocess.run(['powershell','-NoProfile','-Command',ps], capture_output=True)
# ============================================================print("", file=sys.stderr)
print("📦 Tier 2 需要 mineru-open-api（约 30MB，首次安装）。", file=sys.stderr)
print(" 正在安装...", file=sys.stderr)
r = subprocess.run(['npm', 'install', '-g', 'mineru-open-api'],
capture_output=True, text=True, timeout=120)
if r.returncode != 0:
print(f"❌ MinerU 安装失败: {r.stderr[:200]}", file=sys.stderr)print("🔍 Tier 2: MinerU (flash-extract) ...", file=sys.stderr)
try:
result = subprocess.run(
['mineru-open-api', 'flash-extract', image_path],
capture_output=True, text=True, timeout=120
)tr = f'"{python_exe}" {" ".join(f"{a}" for a in args)}'
cmd = ['schtasks','/Create','/SC','ONCE','/TN',label,'/TR',tr,
'/ST','09:00','/SD',alarm_date.strftime('%Y-%m-%d'),'/F']
r = subprocess.run(cmd, capture_output=True, text=True, timeout=15)
if r.returncode != 0:
print(f" ⚠️ schtasks 失败: {r.stderr}"); return False
print(f" ✅ schtasks: {label} → {alarm_date.strftime('%Y-%m-%d')} 09:00")65/65 vendors flagged this skill as clean.
No suspicious patterns detected.