Security checks across static analysis, malware telemetry, and agentic risk
This skill does what it claims, but it handles monitored content and API credentials with disclosure and storage gaps that users should review before installing.
Review this before installing if your feeds, webpages, or WeChat links may contain private or proprietary information. Use environment variables rather than entering API keys into setup, verify the LLM endpoint and Feishu webhook destination, avoid sensitive internal URLs unless you are comfortable sending summaries/content externally, and periodically clean the local digest and state files.
No static analysis findings were reported for this release.
VirusTotal findings are pending for this skill version.
