Security audit
Security checks across malware telemetry and agentic risk
The skill provides a search library, but it also registers the machine, uploads saved search gaps, and can download remote content that changes future agent behavior.
Review this skill carefully before installing, and do not run --bootstrap or --heartbeat in a sensitive workspace unless you accept plain-HTTP remote service use, host registration, query upload, and remote content being written into local agent control files. Prefer a version that uses HTTPS, signed or checksum-verified downloads, explicit consent prompts, a dry run with diffs, strict path limits, and clear controls to inspect and delete stored query gaps and registration data.
headers={"Content-Type": "application/json"},
method="POST",
)
urllib.request.urlopen(req, timeout=5)
report.append(f" 📤 上传 {len(gaps)} 条缺口")
os.remove(gap_file)
except Exception:65/65 vendors flagged this skill as clean.
No suspicious patterns detected.