Security audit
Security checks across malware telemetry and agentic risk
This skill is a disclosed Linux system controller, but it bundles very broad local-control powers with weak built-in boundaries.
Install only if you intentionally want an agent to control your Linux desktop, processes, network settings, serial devices, screenshots/OCR, and smart-home/API endpoints. Review exact commands and URLs before execution, avoid using it around secrets on screen, use least-privilege short-lived tokens where possible, and run it only in environments where broad local control is acceptable.
except ImportError:
print("Installing pyautogui...", file=sys.stderr)
import subprocess
subprocess.check_call(
[sys.executable, "-m", "pip", "install", "pyautogui", "-q"],
stdout=subprocess.DEVNULL
)except ImportError:
print("Installing pillow...", file=sys.stderr)
import subprocess
subprocess.check_call(
[sys.executable, "-m", "pip", "install", "pillow", "-q"],
stdout=subprocess.DEVNULL
)except ImportError:
print("Installing pytesseract...", file=sys.stderr)
import subprocess
subprocess.check_call(
[sys.executable, "-m", "pip", "install", "pytesseract", "-q"],
stdout=subprocess.DEVNULL
)def run_command(cmd, timeout=30):
"""Execute shell command with proper encoding."""
try:
result = subprocess.run(
cmd,
shell=True,
capture_output=True,return requests
except ImportError:
print("Installing requests...")
subprocess.check_call(
[sys.executable, "-m", "pip", "install", "requests", "-q"],
stdout=subprocess.DEVNULL
)def run_command(cmd, timeout=30):
"""Execute shell command with proper encoding."""
try:
result = subprocess.run(
cmd,
shell=True,
capture_output=True,"""Start a process."""
try:
# Use nohup to run in background
process = subprocess.Popen(
command,
shell=True,
stdout=subprocess.DEVNULL,return True
except ImportError:
print("Installing pyserial...")
subprocess.check_call(
[sys.executable, "-m", "pip", "install", "pyserial", "-q"],
stdout=subprocess.DEVNULL
)def run_command(cmd, timeout=30):
"""Execute shell command with proper encoding handling."""
try:
result = subprocess.run(
cmd,
shell=True,
capture_output=True,66/66 vendors flagged this skill as clean.
No suspicious patterns detected.