Security audit
Security checks across malware telemetry and agentic risk
The skill does orchid media analysis, but it also silently creates or reuses an identity, logs into a remote service, stores tokens locally, and can retrieve account-linked report history.
Review before installing if you are not comfortable with media being sent to a remote service and with the skill creating or reusing an internal account identity. Avoid using it with private home, greenhouse, or personally identifying images unless you accept the cloud processing, local token storage, and report-history behavior.
if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
if offset:
query = query.offset(offset)if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
return query.scalar()
finally:63/63 vendors flagged this skill as clean.
Detected: suspicious.install_untrusted_source