Security audit
Security checks across malware telemetry and agentic risk
This repository analysis skill has a coherent purpose, but it includes commit, push, privileged install, and Slack notification workflows while also claiming no network or writes.
Review this skill before installing. Use it only if you are comfortable with agents generating report files and, in CI mode, potentially committing and pushing those reports and sending Slack notifications. Treat the read-only/no-network claims as unreliable unless the publish/notify workflow is removed or made explicitly opt-in, and avoid running the sudo install steps outside trusted ephemeral CI runners.
- name: 安装依赖
run: |
sudo apt-get update
sudo apt-get install -y jq
- name: 执行仓库分析- name: 安装依赖
run: |
sudo apt-get update
sudo apt-get install -y jq
- name: 执行仓库分析
run: |VirusTotal findings are pending for this skill version.
No suspicious patterns detected.