Security audit
blooming-elf 绽放精灵
Security checks across malware telemetry and agentic risk
Overview
The skill appears intended for plant-care help, but its described setup and triggers may create local persistent state and access broader user content from casual plant-related prompts.
Review this skill before installing. Confirm that it asks before creating files, changing shared memory, reading broader knowledge-base folders, exposing document links, or sending city/home-environment details to weather services. It does not show evidence of malware or destructive behavior from the supplied telemetry, but the persistence and broad activation scope deserve user review.
VirusTotal
VirusTotal findings are pending for this skill version.
Static analysis
No suspicious patterns detected.