Security checks across malware telemetry and agentic risk
This skill openly gives an agent broad control over a Windows PC and smart-home/API devices, but its safeguards are mostly instructions rather than enforced limits.
Install only if you intentionally want an agent to control your Windows desktop, processes, power state, network adapters, screen, serial devices, and smart-home/API endpoints. Require explicit confirmation before shutdown/restart/sleep, process or window closing, network changes, POST/PUT/API service calls, and GUI typing/clicking; avoid placing long-lived tokens in command lines or transcripts; hide sensitive windows before screenshots/OCR; and preinstall/review dependencies instead of relying on automatic pip installation.
)
try:
result = subprocess.run(
["powershell", "-NoProfile", "-NonInteractive", "-Command",
encoding_setup + script],
capture_output=True,env["PYTHONIOENCODING"] = "utf-8"
try:
result = subprocess.run(
command,
capture_output=True,
text=True,cmd = [pip, "-m", "pip", "install"] + pkgs
print(f"INFO: Installing missing packages: {', '.join(pkgs)}", file=sys.stderr)
try:
subprocess.run(cmd, capture_output=True, timeout=120)
return True
except Exception as e:
print(f"ERROR: Failed to install packages: {e}", file=sys.stderr)return requests
except ImportError:
print("Installing requests...")
subprocess.check_call(
[sys.executable, "-m", "pip", "install", "requests", "-q"],
stdout=subprocess.DEVNULL
)return True
except ImportError:
print("Installing pyserial...")
subprocess.check_call(
[sys.executable, "-m", "pip", "install", "pyserial", "-q"],
stdout=subprocess.DEVNULL
)65/65 vendors flagged this skill as clean.