Install source points to URL shortener or raw IP.
Warn
- Code
- suspicious.install_untrusted_source
- Location
- skills/smyx_common/scripts/config-dev.yaml:2
Security audit
中医面诊分析工具
Security checks across malware telemetry and agentic risk
Overview
The skill’s face-diagnosis purpose is mostly clear, but it handles sensitive face/health data and includes unclear shared-code and report-history scoping that should be reviewed before use.
Before installing, verify that you trust the provider and the exact runtime helper code, because this skill can upload face/health videos and query cloud report history. Use only videos you have permission to share, avoid using a phone number as the open-id if a less sensitive identifier works, and confirm the skill is using the intended HTTPS production endpoints.
VirusTotal
VirusTotal findings are pending for this skill version.
Static analysis
Detected: suspicious.install_untrusted_source