Security checks across malware telemetry and agentic risk
This plant-analysis skill has enough under-disclosed account, token, cloud history, and mismatched human-analysis behavior that users should review it before installing.
Install only if you are comfortable sending plant media or media URLs plus a user identifier to the publisher's cloud service, and with the skill creating or using an account and storing returned tokens locally. Prefer a corrected version that removes the stale human health/face-analysis references, documents retention and report-history behavior, scopes URL fetching, and avoids local token persistence.
if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
if offset:
query = query.offset(offset)if filters:
for key, value in filters.items():
query = query.filter(getattr(self.__model__, key) == value)
return query.scalar()
finally:59/59 vendors flagged this skill as clean.