Security audit
Security checks across malware telemetry and agentic risk
The skill has a coherent legal-document workflow, but it handles sensitive case data with hardcoded external email delivery, silent global package installation, broad local persistence, and under-scoped automation.
Install only after confirming the QQ recipient is yours, disabling or changing external email delivery if needed, approving any npm dependency installation yourself, and understanding that the skill will store legal SMS/archive data locally and create calendar or scheduled reminder jobs.
f = tempfile.NamedTemporaryFile(mode='w', suffix='.scpt', delete=False, encoding='utf-8')
f.write(script)
f.close()
result = subprocess.run(['osascript', f.name], capture_output=True, text=True)
os.remove(f.name)
if result.returncode != 0:
print(f" AppleScript error: {result.stderr}")f = tempfile.NamedTemporaryFile(mode='w', suffix='.scpt', delete=False, encoding='utf-8')
f.write(script)
f.close()
subprocess.run(['osascript', f.name], capture_output=True, text=True)
os.remove(f.name)t = title.replace('"', '\\"')
m = message.replace('"', '\\"')
script = f'display notification "{m}" with title "{t}" sound name "{sound}"'
result = subprocess.run(['osascript', '-e', script], capture_output=True, text=True)
if result.returncode != 0:
print(f" ⚠️ 系统通知弹出失败: {result.stderr}")
return FalseWrite-Output "OK"
'''
result = subprocess.run(
['powershell', '-NoProfile', '-Command', ps_script],
capture_output=True, text=True, timeout=30
)}}
Write-Output ($toDelete.Count)
'''
subprocess.run(
['powershell', '-NoProfile', '-Command', ps_script],
capture_output=True, text=True, timeout=30
)'/SD', alarm_dt.strftime('%Y-%m-%d'),
'/F'
]
subprocess.run(cmd, capture_output=True, text=True, timeout=15)
def _windows_schedule_email_script(uid_hash, label, alarm_dt, python_exe, script_dir, hour, minute):elif PLATFORM == 'windows':
t = _escape_ps(title); m = _escape_ps(message)
ps = f'Add-Type -AssemblyName System.Windows.Forms; [System.Windows.Forms.MessageBox]::Show("{m}","{t}")'
r = subprocess.run(['powershell','-NoProfile','-Command',ps], capture_output=True)
return r.returncode == 0
else:
print(f" ℹ️ {PLATFORM} 不支持即时弹窗（已生成桌面提醒文件兜底）")f' end tell\nend tell')
f = tempfile.NamedTemporaryFile(mode='w', suffix='.scpt', delete=False, encoding='utf-8')
f.write(script); f.close()
r = subprocess.run(['osascript', f.name], capture_output=True, text=True)
os.remove(f.name)
if r.returncode == 0:
print(f" 📅 Apple Calendar: {summary}")tr = f'"{python_exe}" {" ".join(f"{a}" for a in args)}'
cmd = ['schtasks','/Create','/SC','ONCE','/TN',label,'/TR',tr,
'/ST','09:00','/SD',alarm_date.strftime('%Y-%m-%d'),'/F']
r = subprocess.run(cmd, capture_output=True, text=True, timeout=15)
if r.returncode != 0:
print(f" ⚠️ schtasks 失败: {r.stderr}"); return False
print(f" ✅ schtasks: {label} → {alarm_date.strftime('%Y-%m-%d')} 09:00")script = f'display notification "{m}" with title "{t}"'
f = tempfile.NamedTemporaryFile(mode='w', suffix='.scpt', delete=False, encoding='utf-8')
f.write(script); f.close()
subprocess.run(['osascript', f.name], capture_output=True)
os.remove(f.name)
elif PLATFORM == 'windows':
t = _escape_ps(title); m = _escape_ps(message)elif PLATFORM == 'windows':
t = _escape_ps(title); m = _escape_ps(message)
ps = f'Add-Type -AssemblyName System.Windows.Forms; [System.Windows.Forms.MessageBox]::Show("{m}","{t}")'
subprocess.run(['powershell','-NoProfile','-Command',ps], capture_output=True)
# ============================================================def _install_mineru():
"""自动安装 mineru-open-api"""
print("📦 正在安装 MinerU OCR（仅首次需要，约需 30 秒）...", file=sys.stderr)
r = subprocess.run(['npm', 'install', '-g', 'mineru-open-api'],
capture_output=True, text=True, timeout=120)
if r.returncode != 0:
print(f"❌ MinerU 安装失败: {r.stderr}", file=sys.stderr)tr = f'"{python_exe}" {" ".join(f"{a}" for a in args)}'
cmd = ['schtasks','/Create','/SC','ONCE','/TN',label,'/TR',tr,
'/ST','09:00','/SD',alarm_date.strftime('%Y-%m-%d'),'/F']
r = subprocess.run(cmd, capture_output=True, text=True, timeout=15)
if r.returncode != 0:
print(f" ⚠️ schtasks 失败: {r.stderr}"); return False
print(f" ✅ schtasks: {label} → {alarm_date.strftime('%Y-%m-%d')} 09:00")65/65 vendors flagged this skill as clean.
No suspicious patterns detected.