Security checks across malware telemetry and agentic risk
This Last.fm dashboard package also contains unrelated personal workspace files, exposed credentials, and high-privilege automation instructions that users should review before installing.
Do not install this package as-is unless you intentionally want the entire bundled workspace and have audited it. The Last.fm dashboard code itself looks mostly purpose-aligned, but the package should be republished with only the Last.fm skill files, all exposed credentials removed and rotated, and unrelated automation/sync/location-tracking materials excluded or separately reviewed.
}
def run(cmd):
return subprocess.run(cmd, shell=True, capture_output=True, text=True).stdout.strip()
def load_config():
if os.path.exists(CONFIG_PATH):62/62 vendors flagged this skill as clean.