Security checks across malware telemetry and agentic risk
This elder-care monitoring skill may be legitimate, but it needs review because it processes private video, retrieves cloud history reports, silently provisions backend accounts, stores tokens locally, and contains mismatched analysis artifacts.
Review carefully before installing. Confirm the publisher and API operator, require explicit consent from the monitored elder and authorized caregivers, avoid raw phone numbers when possible, and assume private video plus behavioral reports may be sent to remote services. The package should make account creation explicit, remove unrelated medical/pet artifacts, narrow history access, fix the dependency issue, and add clear retention, deletion, and authorization controls.
if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
if offset:
query = query.offset(offset)if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
return query.scalar()
finally:66/66 vendors flagged this skill as clean.