Install source points to URL shortener or raw IP.
Warn
- Code
- suspicious.install_untrusted_source
- Location
- skills/smyx_common/scripts/config-dev.yaml:2
Security audit
高风险行为识别分析工具
Security checks across malware telemetry and agentic risk
Overview
The skill generally matches its stated video risk-analysis purpose, but its report-listing code can query history without the user's open-id filter, which could expose sensitive health or safety reports.
Review the report-history behavior before installing or using this skill. Only submit videos/images you are allowed to share, confirm the active API endpoint is trusted HTTPS, and avoid using the history-list feature until it is fixed to enforce the current user's open-id filter.
VirusTotal
VirusTotal findings are pending for this skill version.
Static analysis
Detected: suspicious.install_untrusted_source