Security audit
Security checks across malware telemetry and agentic risk
This seller automation skill fits its stated purpose, but it needs Review because it can post seller content and submit bids externally with inconsistent confirmation, endpoint, trigger, and retention controls.
Install only after reviewing the high-impact automation paths. Keep auto-bidding disabled unless you explicitly want bids sent without per-bid approval, verify OW_API_URL before use, avoid broad all-platform publishing until destinations and content are previewed, and do not store sensitive contact, business, payment, or buyer data in the state files without your own access and retention controls.
def search_requests():
"""搜索求购信息"""
try:
with urllib.request.urlopen(OW_API, timeout=30) as response:
data = json.loads(response.read().decode('utf-8'))
if data.get('success'):
return data.get('posts', [])"""搜索OW社区的求购信息（使用 urllib，无需 curl）"""
try:
url = os.environ.get("OW_API_URL", "https://www.owshanghai.com/api/posts") + "?type=request&limit=50"
with urllib.request.urlopen(url, timeout=30) as response:
data = json.loads(response.read().decode('utf-8'))
if data.get("success"):method="POST"
)
with urllib.request.urlopen(req, timeout=30) as response:
result = json.loads(response.read().decode('utf-8'))
if result.get("success"):method='POST'
)
with urllib.request.urlopen(req, timeout=30) as response:
result = json.loads(response.read().decode('utf-8'))
if result.get('success'):58/58 vendors flagged this skill as clean.