Security audit
Security checks across malware telemetry and agentic risk
This is a coherent Insentek IoT data query and export skill, with credential and network risks that are mostly disclosed and purpose-aligned.
Install only if you trust Insentek and need this device-data integration. Configure credentials with `npx @insentek/openapi-skill login`, do not paste appid or secret into chat, leave `INSENTEK_API_BASE` unset unless you control the endpoint, and choose export/report output paths carefully.
for k, v in headers.items():
req.add_header(k, v)
try:
with urllib.request.urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode("utf-8"))
except urllib.error.HTTPError as e:
body = e.read().decode("utf-8")req.data = json.dumps(data).encode("utf-8")
try:
with urllib.request.urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode("utf-8"))
except urllib.error.HTTPError as e:
# 认证失败，尝试刷新 token 后重试一次# 7. API 可达性（不带认证，只检查服务是否在线）
try:
req = urllib.request.Request(f"{api_base}/v3/token", method="GET")
with urllib.request.urlopen(req, timeout=10) as resp:
# 400 是正常的（缺少参数），说明服务在线
results["api_reachable"] = {
"ok": True,65/65 vendors flagged this skill as clean.
Detected: suspicious.dangerous_exec, suspicious.potential_exfiltration