Security audit
Security checks across malware telemetry and agentic risk
This appears to be a real market-research skill, but it uses under-scoped credential handling, mutates the runtime environment, and stores off-purpose adult or sensitive trend data.
Install only after review in a controlled environment. Use dedicated least-privilege API tokens, avoid running it on a personal shell profile, remove ~/.bashrc credential loading and runtime pip installation, and add strict source allowlists plus NSFW/off-topic filters before using its outputs for product or marketing decisions.
from pytrends.request import TrendReq
except ImportError:
print("[Google Trends] pytrends not installed, installing...")
os.system("pip install pytrends --break-system-packages -q")
from pytrends.request import TrendReq
if keywords is None:req = urllib.request.Request(url, data=body, headers={"Content-Type": "application/json"})
try:
with urllib.request.urlopen(req, timeout=timeout_secs + 30) as resp:
items = json.loads(resp.read().decode())
print(f"[Apify] Got {len(items)} items (sync)")
return itemsf"&display_limit={limit}&export_columns=Ph,Po,Nq,Cp,Co,Kd,Tr,Tc,Ur"
f"&domain={domain}&database={database}")
try:
resp = urllib.request.urlopen(url, timeout=20)
text = resp.read().decode()
if 'ERROR' in text[:100]:
print(f"[SEO] Semrush error for {domain}: {text[:100]}")"Notion-Version": "2022-06-28",
"Content-Type": "application/json",
})
with urllib.request.urlopen(req, timeout=15) as resp:
result = json.loads(resp.read().decode())
bot_names = set()66/66 vendors flagged this skill as clean.