Security audit
Security checks for vulnerabilities and agentic risk
This skill is a small Jetson monitoring helper that only documents and runs the local tegrastats command with fixed arguments.
Install this only on systems where NVIDIA Jetson tegrastats is expected to exist. The skill runs a local monitoring command and prints device statistics; review the Chinese-only documentation if language accessibility matters for your environment.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def run_tegrastats():
"""运行 tegrastats"""
try:
result = subprocess.run(
['tegrastats', '--interval', '1000', '--stop'],
capture_output=True,
text=True,
The primary descriptive text is written in Chinese, which imposes a specific language choice in the skill documentation without offering an alternative or explaining a locale-specific requirement. This matches the policy category for language or locale constraints lacking user opt-in or clear justification.
The module docstring and function docstring are written only in Chinese, which imposes a specific language choice in the skill's natural-language content. The file does not indicate that this is a region-specific tool or offer any language/locale opt-in, which matches the language policy violation criteria.
No suspicious patterns detected.