Byted Security Llmscanner

This skill appears to do what it says (manage LLM/agent security test assets and tasks) but requires you to run Node scripts and to provide API credentials. Before installing/use: 1) Inspect scripts/config.ts and replace placeholders with correct endpoints only on trusted infrastructure; avoid putting real production credentials into a file on a shared machine. 2) Note the code disables TLS certificate verification (httpsAgent rejectUnauthorized: false) — only use that if you trust the target host or run behind secure network; prefer proper certs. 3) Run npm install and npx ts-node only after reviewing package.json and node_modules; consider installing in an isolated environment/container. 4) Check where token_cache.json and report files will be written (skill data_dir) and who can read them. 5) If you don't want the agent to run the skill autonomously, keep it user-invocable only and avoid enabling automatic invocation. If you want, I can scan specific files (common.ts and the remaining omitted files) for additional risky patterns or point out exact lines where TLS verification or credential handling occur.

These patterns were detected by automated regex scanning. They may be normal for skills that integrate with external APIs. Check the VirusTotal and OpenClaw results above for context-aware analysis.