Security audit
Security checks across malware telemetry and agentic risk
This skill is not clearly malicious, but it gives the agent broad authority to run project commands, write persistent workflow state, generate follow-up cron tasks, and delete workflow directories, so it should be reviewed before use.
Install only if you want this skill to actively manage bug-fix workflows in your workspace. Review the test command before each run, use a sandbox for untrusted repositories, keep secrets out of project environment/state fields, and be careful with cleanup and cron-related steps because they can persist work and remove old bug artifacts.
if not cov_args:
cov_args = ["--cov", "."]
cmd = [sys.executable, "-m", "pytest"] + cov_args + [test_path, "--no-header", "-q"]
result = subprocess.run(
cmd,
capture_output=True, text=True, timeout=30,
)log.info("Exec: %s (cwd=%s)", cmd, actual_cwd)
try:
shell = os.name == "nt"
proc = subprocess.run(
cmd, capture_output=True, text=True,
timeout=self.timeout, cwd=actual_cwd, shell=shell, env=env
)if not cov_args:
cov_args = ["--cov", "."]
cmd = [sys.executable, "-m", "pytest"] + cov_args + [test_path, "--no-header", "-q"]
result = subprocess.run(
cmd,
capture_output=True, text=True, timeout=30,
)log.info("Exec: %s (cwd=%s)", cmd, actual_cwd)
try:
shell = os.name == "nt"
proc = subprocess.run(
cmd, capture_output=True, text=True,
timeout=self.timeout, cwd=actual_cwd, shell=shell, env=env
)# 零稀泥模式 — 开发依赖 # pip install -r requirements-dev.txt pytest>=7 pytest-cov>=5
# pip install -r requirements-dev.txt pytest>=7 pytest-cov>=5
VirusTotal findings are pending for this skill version.
Detected: suspicious.dynamic_code_execution