Security audit
Security checks across malware telemetry and agentic risk
This defensive canary skill is not malicious, but it needs Review because it plants credential-shaped files in hard-coded home/workspace paths and installs recurring monitoring.
Install only if you intentionally want decoy secret files and recurring monitoring. Before deploying, verify the target paths, add the canary files to ignore rules as needed, and confirm you can remove the cron job and remaining incident log during cleanup.
if not os.path.isfile(logfile):
continue
try:
result = subprocess.run(
["grep", "-l", token_short, logfile],
capture_output=True, text=True, timeout=5
)VirusTotal findings are pending for this skill version.
Detected: suspicious.exposed_secret_literal