Security audit
Security checks for vulnerabilities and agentic risk
This skill is mainly a company lookup helper, but it asks for broad command/file authority and contains unclear or conflicting capability claims that users should review before installing.
Install only if you are comfortable with an agent running Node-based commands for company lookups and sending company or person identifiers to an external business-information API. Treat the SEO, generic file-processing, and risk-screening claims as unresolved scope issues, and avoid using it for sensitive due-diligence workflows unless the publisher clarifies the actual available tools, API provider, and data handling.
self.runtime, self.script_path, "call", tool_name,
"--params", json.dumps(params, ensure_ascii=False)
]
result = subprocess.run(
cmd, capture_output=True, text=True, timeout=30, encoding="utf-8"
)
if result.returncode == 0:No suspicious patterns detected.