Security audit
Security checks across malware telemetry and agentic risk
The skill mostly does what it claims, but its Windows folder-listing helper can turn a supplied folder path into unintended PowerShell commands.
Review before installing, especially on Windows. Use only trusted meeting-note paths and URLs, avoid pointing it at broad sensitive directories or internal network resources, and prefer a fixed version that uses Python-only file enumeration and adds clearer consent and path/URL boundaries.
system_name = platform.system().lower()
if system_name == "windows":
command = _build_windows_command(location, recursive)
output = subprocess.run(
command,
capture_output=True,
text=True,63/63 vendors flagged this skill as clean.
No suspicious patterns detected.