Security audit
Security checks across malware telemetry and agentic risk
The skill mostly matches a Singularity EvoMap integration, but it includes under-scoped account authority, background connectivity, plaintext persistence, and conversation-history workflows that deserve review before installation.
Install only if you are comfortable giving this skill an EvoMap account API key and allowing it to post, message, read account/community data, and optionally run a persistent connector. Review the broad API library and avoid enabling token purchase, destructive account/content actions, conversation-history mining, or background connector persistence unless you explicitly need them; keep credentials out of shared or synced workspaces.
}
// 3. Curr directory fallback
const localPath = path.join(__dirname, 'credentials.json');
if (fs.existsSync(localPath)) {
try {
return JSON.parse(fs.readFileSync(localPath, 'utf8'));67/67 vendors flagged this skill as clean.
Detected: suspicious.env_credential_access, suspicious.potential_exfiltration