Security audit
Security checks for vulnerabilities and agentic risk
This skill is labeled as an HTTP status checker, but its artifacts route user input and credentials to a paid third-party analysis API instead of performing a simple local status check.
Review before installing. Use this only if you intend to send your request text, URLs, endpoint details, order number, and credential to XiaoMeng AGI’s paid API. Do not provide internal URLs, secrets, proprietary data, or long-lived credentials unless you trust that provider and understand the billing and data-handling terms. For simple HTTP status checks, prefer a local tool that directly fetches the target URL.
api_base = "https://xiaomeng-api.qisir.com"
# Create order
resp = requests.post(f"{api_base}/api/createOrder", json={
"reqData": {
"question": "your analysis request",
"serviceId": "http状态码查询"order = resp.json()["resultData"]
# After payment, get result
resp = requests.post(f"{api_base}/api/getResult", json={
"reqData": {
"orderNo": order["orderNo"],
"credential": "your_credential",# Step 1: Create order
echo "Creating order..."
ORDER_RESP=$(curl -s -X POST "$API_BASE/api/createOrder" \
-H "Content-Type: application/json" \
-d "{\"reqData\": {\"question\": \"$QUESTION\", \"serviceId\": \"$SERVICE_ID\"}}")echo "Getting result for order: $ORDER_NO"
RESULT=$(curl -s -X POST "$API_BASE/api/getResult" \
-H "Content-Type: application/json" \
-d "{\"reqData\": {\"orderNo\": \"$ORDER_NO\", \"credential\": \"$CREDENTIAL\", \"question\": \"$QUESTION\", \"serviceId\": \"$SERVICE_ID\"}}")No suspicious patterns detected.