Security audit
Security checks across malware telemetry and agentic risk
The skill’s main analytics function is understandable, but its artifacts show under-scoped network, persistence, and external-install behavior that users should review before installing.
Install only if you are comfortable with this skill making authenticated external API calls, storing complete API responses locally, and relying on environment-provided gateway/auth settings. Review and constrain the gateway URL, avoid sending sensitive prompts through any feedback feature, and treat any external skill-install instruction as requiring separate manual review.
method="POST",
)
try:
with urlopen(req, timeout=120) as response:
return json.loads(response.read().decode("utf-8"))
except HTTPError as e:
body = e.read().decode("utf-8") if e.fp else ""59/59 vendors flagged this skill as clean.
No suspicious patterns detected.