Security audit
Security checks across malware telemetry and agentic risk
This desktop automation skill is powerful and mostly transparent about its goal, but it handles remote-access credentials, screenshots, app launching, and WeChat actions with too little scoping or confirmation.
Install only if you fully trust the publisher and intend to give the skill broad control over your Windows desktop. Before use, require explicit confirmation for ToDesk credential sharing, WeChat sends, file transfers, app launches, and file writes; avoid using it while sensitive windows are visible, and clear or restrict stored screenshots.
"code": "code",
}
cmd = app_map.get(app_name.lower(), app_name)
subprocess.Popen(cmd, shell=True)
logger.info(f"启动应用: {app_name} -> {cmd}")
return True
except Exception as e:64/64 vendors flagged this skill as clean.
No suspicious patterns detected.