Security checks across malware telemetry and agentic risk
This skill openly automates Hinge, but it can take live dating-account actions, upload profile screenshots to Gemini, retain sensitive logs, and encourages unsafe cron secret handling.
Install only if you intentionally want an agent to operate your Hinge account, send likes/comments, upload profile screenshots to Gemini, and keep local session artifacts. Do not hardcode API keys in cron payloads; use protected secret storage, avoid unattended daily runs unless explicitly desired, and regularly delete screenshots, recordings, and detailed logs.
def adb_cmd(*args):
try:
result = subprocess.run([ADB] + list(args), capture_output=True, text=True, timeout=30)
return result.stdout.strip()
except subprocess.TimeoutExpired:
log(f" ⚠️ ADB command timed out: {args}")def screenshot(path):
with open(path, "wb") as f:
subprocess.run([ADB, "exec-out", "screencap", "-p"], stdout=f, timeout=10)
def dump_ui():def dump_ui():
try:
adb_cmd("shell", "uiautomator", "dump", "/sdcard/ui_dump.xml")
subprocess.run([ADB, "pull", "/sdcard/ui_dump.xml", "/tmp/ui_dump.xml"],
capture_output=True, text=True, timeout=10)
with open("/tmp/ui_dump.xml") as f:
return f.read()66/66 vendors flagged this skill as clean.