Security audit
Security checks across malware telemetry and agentic risk
This is a disclosed multi-agent orchestration skill, but it gives agents powerful execution and persistence abilities with weak safeguards around memory reuse, filesystem scope, cron automation, and deletion.
Install only if you want a high-trust multi-agent environment. Before using it, narrow the default tool grants, especially automator cron/browser/exec access; keep agent workspaces under a dedicated directory; avoid logging secrets or personal data into experience memory; treat stored experience as untrusted; and avoid --no-backup deletion unless you have verified the exact path and have your own backup.
```python
# 获取历史经验
import subprocess
result = subprocess.run(
["python3", "scripts/experience_logger.py", "inject", "researcher", "--limit", "5"],
capture_output=True, text=True
)66/66 vendors flagged this skill as clean.
No suspicious patterns detected.