Security audit
Security checks for vulnerabilities and agentic risk
This reporting skill is mostly transparent, but it needs Review because it includes an unbounded custom shell-command module alongside sensitive report delivery paths.
Install only if you trust the publisher and will control the report configurations. Avoid using the CUSTOM module unless you fully understand the command being run, prefer local file output for sensitive reports, use app-specific IMAP credentials, and treat Telegram delivery as sharing report contents with a third-party service.
"items": [],
}
result = subprocess.run(
command,
shell=True,
capture_output=True,Run `nex-healthcheck check` subprocess.
"""
try:
result = subprocess.run(
["nex-healthcheck", "check"],
capture_output=True,
text=True,Run `nex-crm pipeline` subprocess.
"""
try:
result = subprocess.run(
["nex-crm", "pipeline"],
capture_output=True,
text=True,No suspicious patterns detected.