Security audit
Security checks across malware telemetry and agentic risk
The skill matches its baby blanket monitoring purpose, but it handles sensitive infant video with cloud processing, silent identity setup, and local token storage that are not clearly disclosed enough.
Review before installing. Use it only if you are comfortable sending infant/nursery videos or URLs to the publisher's cloud service, having reports tied to an automatically created or reused local identity, and storing service tokens in a workspace SQLite database. Ask the publisher for clear endpoint, retention, deletion, and account-linking documentation.
if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
if offset:
query = query.offset(offset)if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
return query.scalar()
finally:"source": ConstantEnum.DEFAULT__SKILL_HUB_NAME
}
try:
_response = requests.post(_url, json=_data)
if _response.status_code == 200:
_response_json = _response.json()
if _response_json and _response_json.get("success"):|---|---| | 📚 文档读取 | 仅在需要时读取参考文档，保持上下文简洁 | | 📁 格式支持 | 支持格式：mp4/avi/mov，最大 10MB | | 🧑⚖️ 结果性质 | **⚠️ 重要提示**：本监测结果仅供辅助提醒参考，不能替代家长看护和婴儿安全监护，请确保宝宝睡眠环境安全 | | 🚫 脚本限制 | 禁止临时生成脚本，只能用技能本身的脚本 | | 🌐 网络地址 | 传入的网路地址参数，不需要下载本地，默认地址都是公网地址，api 服务会自动下载 | | 📜 报告输出 | 当显示历史分析报告清单的时候，从接口返回 json 数据中提取字段 作为超链接地址，且自动转化为如下 Markdown |
VirusTotal findings are pending for this skill version.
Detected: suspicious.install_untrusted_source