Security audit
Security checks across malware telemetry and agentic risk
The skill mostly does what it says, but its optional subscription feature installs persistent scheduled jobs and can store an API key on disk without enough warning.
Install only if you are comfortable giving this skill a RedFox API key, letting it query redfox.hk, writing reports under ~/Downloads/QoderReports, and optionally adding a daily scheduled job. Avoid --subscribe unless you understand that it modifies LaunchAgents or crontab; on macOS it may store REDFOX_API_KEY in a plist. Prefer running reports manually with --no-open, and inspect or remove any scheduler entry if you stop using it.
script_path = os.path.abspath(__file__)
cron_line = f"0 16 * * * /usr/bin/python3 {script_path} --no-open"
try:
subprocess.run(
f'(crontab -l 2>/dev/null; echo "{cron_line}") | crontab -',
shell=True, check=True, capture_output=True
)else:
script_path = os.path.abspath(__file__)
try:
subprocess.run(
f'crontab -l 2>/dev/null | grep -v "{script_path}" | crontab -',
shell=True, check=True, capture_output=True
)log_path = str(Path.home() / "Library" / "Logs" / "qoder-douyin-ai-feed.log")
env_section = ""
api_key = os.environ.get(ENV_KEY, "").strip()
if api_key:
env_section = f"""
<key>EnvironmentVariables</key>else:
script_path = os.path.abspath(__file__)
try:
subprocess.run(
f'crontab -l 2>/dev/null | grep -v "{script_path}" | crontab -',
shell=True, check=True, capture_output=True
)# ── 打开浏览器 ──
if not args.no_open:
if sys.platform == "darwin":
subprocess.run(["open", str(output_path)], check=False)
elif sys.platform == "linux":
subprocess.run(["xdg-open", str(output_path)], check=False)
info(f"浏览器已打开: {output_path}")if sys.platform == "darwin":
subprocess.run(["open", str(output_path)], check=False)
elif sys.platform == "linux":
subprocess.run(["xdg-open", str(output_path)], check=False)
info(f"浏览器已打开: {output_path}")
print(f"\n{GREEN}{BOLD}✓ 完成!{RESET}")cron_line = f"0 16 * * * /usr/bin/python3 {script_path} --no-open"
try:
subprocess.run(
f'(crontab -l 2>/dev/null; echo "{cron_line}") | crontab -',
shell=True, check=True, capture_output=True
)
info("订阅成功! 每天 16:00 自动生成抖音 AI 日报 (crontab)")def install_subscription():
"""安装定时任务，每天自动生成日报"""
if sys.platform == "darwin":
PLIST_DIR.mkdir(parents=True, exist_ok=True)
plist_path = PLIST_DIR / f"{PLIST_LABEL}.plist"
script_path = os.path.abspath(__file__)"""安装定时任务，每天自动生成日报"""
if sys.platform == "darwin":
PLIST_DIR.mkdir(parents=True, exist_ok=True)
plist_path = PLIST_DIR / f"{PLIST_LABEL}.plist"
script_path = os.path.abspath(__file__)
log_path = str(Path.home() / "Library" / "Logs" / "qoder-douyin-ai-feed.log")"""安装定时任务，每天自动生成日报"""
if sys.platform == "darwin":
PLIST_DIR.mkdir(parents=True, exist_ok=True)
plist_path = PLIST_DIR / f"{PLIST_LABEL}.plist"
script_path = os.path.abspath(__file__)
log_path = str(Path.home() / "Library" / "Logs" / "qoder-douyin-ai-feed.log")"""安装定时任务，每天自动生成日报"""
if sys.platform == "darwin":
PLIST_DIR.mkdir(parents=True, exist_ok=True)
plist_path = PLIST_DIR / f"{PLIST_LABEL}.plist"
script_path = os.path.abspath(__file__)
log_path = str(Path.home() / "Library" / "Logs" / "qoder-douyin-ai-feed.log")"""安装定时任务，每天自动生成日报"""
if sys.platform == "darwin":
PLIST_DIR.mkdir(parents=True, exist_ok=True)
plist_path = PLIST_DIR / f"{PLIST_LABEL}.plist"
script_path = os.path.abspath(__file__)
log_path = str(Path.home() / "Library" / "Logs" / "qoder-douyin-ai-feed.log")<string>{api_key}</string>
</dict>"""
plist_content = f'''<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict></dict>"""
plist_content = f'''<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>VirusTotal findings are pending for this skill version.
No suspicious patterns detected.