Security checks across malware telemetry and agentic risk
This KakaoTalk bot skill is purpose-aligned but needs review because relay mode can expose local memory and chat content through cloud services and unvalidated callbacks.
Install only after reading the Relay-mode behavior carefully. Use Basic mode if you only need a chatbot. If using Relay mode, keep secrets out of MEMORY.md, use a dedicated Supabase project with least-privilege credentials, require Kakao signature validation, restrict callback destinations, avoid exposing the local server publicly unless needed, and disable the launchd/ngrok helpers when not in active use.
headers={"Content-Type": "application/json; charset=utf-8"},
method="POST",
)
with urllib.request.urlopen(req, timeout=10) as resp:
_log(f"📤 콜백 전송 완료: status={resp.status}, url={callback_url[:60]}")
except Exception as e:
_log(f"❌ 콜백 전송 실패: {e}")"Content-Type": "application/json"
})
try:
with urllib.request.urlopen(req) as resp:
print(f"✅ 발송 성공: {text[:20]}...")
return True
except Exception as e:1. [Supabase](https://supabase.com) 프로젝트 생성.
2. **SQL Editor**에서 아래 쿼리 실행:
```sql
create table kakaotalk_queue (
id bigint generated by default as identity primary key,
user_id text not null, utterance text not null, callback_url text,
status text default 'pending', response text, created_at timestamptz default now()64/64 vendors flagged this skill as clean.