Security audit
Security checks across malware telemetry and agentic risk
The skill has a coherent cron-safety purpose, but it gives an agent broad local script execution ability without tight scoping or confirmation guidance.
Install only if you are comfortable letting the agent run local scripts you explicitly choose. Review scripts first, avoid untrusted or writable paths, prefer dry-run or non-production testing, and keep log locations limited to expected directories.
"""安全执行脚本，带超时和退出码检查"""
try:
logger.info(f"执行脚本：{script_path}")
result = subprocess.run(
["bash", script_path],
capture_output=True,
text=True,65/65 vendors flagged this skill as clean.
No suspicious patterns detected.