Security audit
Security checks across malware telemetry and agentic risk
This paid crypto-monitoring skill is not clearly malicious, but it needs review because it can perform billing calls and presents simulated financial monitoring as if it were live intelligence.
Install only if you are comfortable with a paid SkillPay integration that may attempt per-use billing, and treat generated crypto reports or alerts as demo/simulated unless the publisher provides real, auditable data sources. Configure Telegram, Discord, and webhook endpoints carefully because alert details may be sent to third-party services, and keep API keys and bot tokens out of shared files or repositories.
返回: {"ok": bool, "balance": float, "payment_url": str|None}
"""
try:
resp = requests.post(
f"{BILLING_API_URL}/api/v1/billing/charge",
headers=HEADERS,
json={def get_payment_link(user_id: str, amount: float = 5.0) -> str:
"""生成充值链接"""
try:
resp = requests.post(
f"{BILLING_API_URL}/api/v1/billing/payment-link",
headers=HEADERS,
json={"user_id": user_id, "amount": amount},'embeds': [embed]
}
response = requests.post(webhook_url, json=payload, timeout=10)
if response.status_code == 204:
logger.info("✅ Discord通知已发送")
else:'timestamp': datetime.now().isoformat()
}
response = requests.post(webhook_url, json=payload, timeout=10)
if response.status_code == 200:
logger.info("✅ Webhook通知已发送")
except Exception as e:67/67 vendors flagged this skill as clean.
No suspicious patterns detected.