Security audit
Security checks across malware telemetry and agentic risk
This SDK teaching skill is mostly coherent, but one calculator example exposes arbitrary Python execution if users run or copy it as written.
Review before installing or copying examples. Do not run or reuse the calculator tool as written; replace eval with a safe arithmetic parser. Treat provider API keys, traces, conversation history, and event data as sensitive, especially in shared terminals or logs.
"""计算数学表达式的结果"""
print(f"[调试] 计算: {expression}")
try:
result = eval(expression)
return float(result)
except Exception as e:
return 0.066/66 vendors flagged this skill as clean.
Detected: suspicious.dynamic_code_execution