Security checks across malware telemetry and agentic risk
This skill should be reviewed because it sets up recurring email automation but also contains hard-coded recipients and bundled download, proxy, Telegram, MCP, and transcription features that are broader than the advertised daily report.
Install only after reviewing and changing all recipient settings, cron entries, SMTP credentials, and API keys. Treat the bundled downloader, transcription, MCP server, WebUI proxy, and Telegram artifacts as additional capabilities, not just dependencies for a simple daily email report.
docx_path = None
try:
# 用 venv Python 运行 md_to_docx（依赖 python-docx）
p = subprocess.run(
[VENV_PY, str(SCRIPT_DIR / 'helpers' / 'md_to_docx.py'), str(file_path)],
capture_output=True, text=True, timeout=60
)if show_progress:
print(f"正在下载视频: {video_info['title']}")
response = requests.get(video_info['url'], headers=HEADERS, stream=True)
response.raise_for_status()
# 获取文件大小}
try:
response = requests.post(self.api_base_url, files=files, headers=headers)
response.raise_for_status()
result = response.json()raise ValueError("未找到有效的分享链接")
share_url = urls[0]
share_response = requests.get(share_url, headers=HEADERS)
video_id = share_response.url.split("?")[0].strip("/").split("/")[-1]
share_url = f'https://www.iesdouyin.com/share/video/{video_id}'ctx.info(f"正在下载视频: {video_info['title']}")
response = requests.get(video_info['url'], headers=HEADERS, stream=True)
response.raise_for_status()
# 获取文件大小def run(cmd, capture=True, check=True):
if isinstance(cmd, str):
cmd = cmd.split()
p = subprocess.run(cmd, capture_output=capture, text=True)
if check and p.returncode != 0:
raise RuntimeError(p.stderr.strip() or f"command failed: {cmd}")
return p.stdout.strip() if capture else ""'-o', str(out_path.with_suffix('.%(ext)s')),
url
]
p = subprocess.run(cmd, capture_output=True, text=True, timeout=120)
if p.returncode == 0:
downloaded = list(out_path.parent.glob(f"{out_path.stem}.*"))
if downloaded:print(text)
_run()
"""
p = subprocess.run([VENV_PY, '-c', code], capture_output=True, text=True, timeout=300)
if p.returncode != 0:
raise RuntimeError(p.stderr.strip() or 'transcription failed')
return p.stdout.strip()print(text)
_run()
"""
p = subprocess.run([VENV_PY, '-c', code], capture_output=True, text=True, timeout=600)
if p.returncode != 0:
raise RuntimeError(p.stderr.strip() or p.stdout.strip() or 'transcription failed')
return p.stdout.strip()docx_path = None
try:
# 用 venv Python 运行 md_to_docx（依赖 python-docx）
p = subprocess.run(
[VENV_PY, str(SCRIPT_DIR / 'helpers' / 'md_to_docx.py'), str(file_path)],
capture_output=True, text=True, timeout=60
)65/65 vendors flagged this skill as clean.