Security audit
Security checks across malware telemetry and agentic risk
This travel-search skill is coherent and purpose-aligned, but it sends trip search details to external proxy services to retrieve results.
Install only if you are comfortable sending travel search details such as origin, destination, and departure date to the skill publisher's proxy services. Do not expose unrelated secrets through an environment variable named PROXY_TOKEN when running this skill.
method="POST",
)
try:
with urllib.request.urlopen(req, timeout=TC_TIMEOUT) as r:
return json.loads(r.read().decode("utf-8"))
except urllib.error.HTTPError as e:
err = "")
_timeout = timeout or FG_TIMEOUT
try:
with urllib.request.urlopen(req, timeout=_timeout) as r:
return json.loads(r.read().decode("utf-8"))
except urllib.error.HTTPError as e:
err = ""# ============ 配置 ============
TONGCHENG_PROXY = "https://1439498936-7vqpkiipef.ap-guangzhou.tencentscf.com"
FLIGGY_PROXY = "https://1439498936-6sysdjjt99.ap-guangzhou.tencentscf.com"
PROXY_TOKEN = os.environ.get("PROXY_TOKEN", "tp_8k2mX9vQ4z")
TC_TIMEOUT = 15
FG_TIMEOUT = 30return {"error": "request error: " + str(e)}
def _call_fliggy(rtype, params, timeout=None):
"""调用飞猪SCF代理"""
body = json.dumps({"type": rtype, "params": params}, ensure_ascii=False, separators=(",", ":")).encode("utf-8")
req = urllib.request.Request(65/65 vendors flagged this skill as clean.
No suspicious patterns detected.