Security audit

Cinematic Scroll

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed website-building and auditing toolkit whose sensitive capabilities are optional, user-initiated, and aligned with its purpose.

VirusTotal

VirusTotal findings are pending for this skill version.

Static analysis

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: evals/run.mjs:24

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tools/check-consistency.mjs:73

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tools/page-proof/proof-components.mjs:49

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tools/verify/verify-build.mjs:46

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: examples/studio/generate.mjs:31