Security audit
Security checks across malware telemetry and agentic risk
This skill is related to NAS movie automation, but it ships hardcoded credentials and can broadly access or modify NAS and qBittorrent content.
Install only in an environment you fully control after removing all bundled credentials, rotating any exposed passwords or API keys, replacing them with least-privilege secrets, and reviewing the SMB mount, --all subtitle, archive/move, and qBittorrent delete workflows before running them.
]
print(f"尝试挂载: {' '.join(mount_cmd)}")
result = subprocess.run(mount_cmd, capture_output=True, text=True)
if result.returncode == 0:
print(f"挂载成功! 目录: {mount_point}")return True
except ImportError:
print("正在安装 smbprotocol 库...")
result = subprocess.run(
[sys.executable, "-m", "pip", "install", "--user", "smbprotocol"],
capture_output=True,
text=Trueif download_link:
# 下载实际文件
file_response = requests.get(download_link, timeout=60)
if file_response.status_code == 200:
return file_response.content66/66 vendors flagged this skill as clean.
No suspicious patterns detected.