Security audit
Security checks across malware telemetry and agentic risk
The skill appears to perform the advertised baby video analysis, but it also sends sensitive nursery media to cloud services and silently creates, reuses, and stores account credentials.
Review this skill carefully before installing. It may upload infant sleep videos or URLs to an external cloud API, query cloud report history, create or reuse an internal user identity, and store service tokens locally. Install only if you accept those cloud-processing and account-persistence behaviors for sensitive nursery footage.
if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
if offset:
query = query.offset(offset)if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
return query.scalar()
finally:"source": ConstantEnum.DEFAULT__SKILL_HUB_NAME
}
try:
_response = requests.post(_url, json=_data)
if _response.status_code == 200:
_response_json = _response.json()
if _response_json and _response_json.get("success"):try:
# 执行命令
# result = subprocess.run(
# cmd,
# capture_output=True,
# text=True,65/65 vendors flagged this skill as clean.