Security audit
Security checks across malware telemetry and agentic risk
This skill is not clearly malicious, but it bundles broad Temu API proxying, local token handling, file download, payment onboarding, and live price changes into a pricing skill.
Install only after reviewing whether you need the generic proxy, file download, local token store, and billing/onboarding features. Use least-privilege Temu tokens, avoid unmasked token listing or raw token output, keep token files private, verify gateway environment variables, and require explicit user confirmation before any batch price changes or payment/order actions.
except RuntimeError as e:
return {"_error": str(e)}
try:
r = requests.post(url, json=body or {}, headers=headers, timeout=timeout)
return r.json()
except Exception as e:
body_text = ""headers["Content-Type"] = "application/json"
req = Request(url, method=method, data=body_bytes, headers=headers)
try:
with urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except urllib.error.HTTPError as e:
status = e.codeVirusTotal findings are pending for this skill version.
No suspicious patterns detected.