Security checks across malware telemetry and agentic risk
This is a coherent YOLO computer-vision toolkit, with expected local setup, model download, diagnostics, training, and output-file behavior disclosed in the artifacts.
Install this in a virtual environment, expect model/package downloads unless using preloaded local models, and avoid using private images, videos, webcam feeds, or datasets unless you are comfortable with local copies and generated outputs being saved. Treat environment reports as sensitive and redact paths, hardware details, and package information before sharing. Only run cache cleanup or dataset upload options when explicitly intended.
def run_command(cmd):
"""Run command and return output"""
try:
result = subprocess.run(cmd, shell=True, capture_output=True, text=True, check=True)
return result.stdout.strip()
except subprocess.CalledProcessError as e:
return f"Error: {e.stderr.strip()}"try:
# Check if Python exists and can run
cmd = f'"{path}" -c "import sys; print(sys.version.split()[0])"'
result = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=2)
if result.returncode == 0:
version = result.stdout.strip()version = result.stdout.strip()
# Try to import ultralytics in this environment
ultralytics_check = subprocess.run(
f'"{path}" -c "import ultralytics; print(ultralytics.__version__)"',
shell=True, capture_output=True, text=True, timeout=2
)53/53 vendors flagged this skill as clean.