Security checks across malware telemetry and agentic risk
The skill is a legitimate video analyzer, but it publishes full analysis content to Feishu by default and changes the local Python environment, so users should review it before installing.
Install only if you are comfortable with the skill downloading media, sending transcripts to configured LLM providers, saving transcripts and screenshots locally, installing Python packages automatically, and publishing full analysis content to Feishu by default. Disable Feishu publishing before analyzing private, confidential, regulated, or proprietary videos.
def install_package(package: str) -> bool:
"""Install a Python package."""
try:
result = subprocess.run(
[sys.executable, "-m", "pip", "install", package],
capture_output=True,
text=True,]
try:
result = subprocess.run(
cmd,
capture_output=True,
check=True,65/65 vendors flagged this skill as clean.