Security audit
Security checks across malware telemetry and agentic risk
This train-ticket skill sends travel data to external proxies and includes broader travel tools that are not disclosed in its public skill description.
Review carefully before installing. Use it only if you are comfortable sending travel and location details to the listed proxy services, and prefer a version that removes the hardcoded token, narrows the script to the declared train-ticket function, and clearly discloses all external data sharing.
data=payload, headers=headers, method="POST",
)
try:
with urllib.request.urlopen(req, timeout=TIMEOUT) as resp:
return json.loads(resp.read().decode("utf-8"))
except urllib.error.HTTPError as e:
detail = ""data=payload, headers=headers, method="POST",
)
try:
with urllib.request.urlopen(req, timeout=TIMEOUT) as resp:
return json.loads(resp.read().decode("utf-8"))
except urllib.error.HTTPError as e:
detail = ""# ============================================================
FLIGGY_PROXY = os.environ.get("FLIGGY_PROXY", "https://1439498936-6sysdjjt99.ap-guangzhou.tencentscf.com")
GAODE_PROXY = os.environ.get("GAODE_PROXY", "https://1439498936-bl10af74fl.ap-guangzhou.tencentscf.com")
PROXY_TOKEN = os.environ.get("PROXY_TOKEN", "tp_8k2mX9vQ4z")
TIMEOUT = 30
# ============================================================64/64 vendors flagged this skill as clean.
No suspicious patterns detected.