Pilot Presence
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's requirements and instructions are coherent with a presence-tracking purpose; it is instruction-only, asks only for pilotctl and jq, and does not request unrelated credentials or privileged installation.
This skill is coherent for presence tracking, but before installing: 1) Verify the pilotctl binary and pilot-protocol skill come from a trusted source and review what network endpoints pilotctl contacts. 2) Confirm the coordinator/peers you will publish to are trusted — the skill broadcasts hostnames and timestamps which could reveal availability patterns. 3) If you have privacy/infosec concerns, restrict or sanitize the published payload, avoid writing secrets to the status file, and consider adding authentication/encryption to the pub/sub channel. 4) Be aware the example runs an infinite loop that periodically publishes; ensure this behavior and interval are acceptable for network load and privacy. If you want more assurance, request the pilotctl source or documentation and inspect its network/auth behavior before enabling this skill.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.