Security audit
Security checks across malware telemetry and agentic risk
This private sales workflow is not overtly malicious, but it needs review because it stores a third-party login token, downloads bid attachments, and can send collected content to an external model service with incomplete disclosure.
Install only if you are the intended owner and you understand that it will authenticate to Qianlima/乙方宝, store a reusable token locally, download and retain bid artifacts, and may send detail and attachment text to an external model endpoint if analysis is enabled. Keep the workdir private, avoid broad triggers, leave model analysis off unless explicitly needed, and update or pin dependencies to reviewed versions.
输入数据：
""" + json.dumps(cleaned, ensure_ascii=False)
url = config.analysis_base_url.rstrip("/") + "/v1/messages"
response = requests.post(
url,
headers={
"Authorization": f"Bearer {config.analysis_token}",VirusTotal findings are pending for this skill version.
No suspicious patterns detected.