Security checks across malware telemetry and agentic risk
The skill is mainly for cloud-based fish video analysis, but it under-discloses account creation, local token storage, and has an unsafe dependency entry, so it should go to Review before installation.
Install only if you trust the publisher and are comfortable sending aquarium videos plus a user identifier to the Life Emergence/SMYX cloud service. Avoid using a phone number as open-id if possible, review or remove the bad yaml dependency before installation, and treat the local workspace database as sensitive because it may contain authentication tokens.
if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
if offset:
query = query.offset(offset)if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
return query.scalar()
finally:VirusTotal findings are pending for this skill version.