Security audit
Security checks across malware telemetry and agentic risk
This is a disclosed local research tool with optional web fetching and portal features; its main risks are operational configuration choices rather than hidden or malicious behavior.
Install only if you are comfortable with a local research vault that can fetch user-supplied URLs, use configured search APIs, and run a localhost portal. Keep the portal bound to localhost, protect or delete .portal_auth when needed, leave private-network fetching disabled unless you intentionally need it, and avoid using --ai or search/watchdog features with sensitive research unless you accept those data flows.
if not has_open_queue:
rationale = [
f"Low-confidence/unverified findings detected (low_conf={state.low_confidence_count}, unverified={state.unverified_count}).",
"No verification missions exist yet for this branch.",
]
cmds = [
f"vault verify plan --id {state.project_id} --branch {state.branch} --threshold {cfg.verify_threshold} --max {cfg.max_verification_missions}",66/66 vendors flagged this skill as clean.