Security audit
Security checks across malware telemetry and agentic risk
The skill does what it claims, but it can upload local/video-derived content to Notion, modify existing Notion pages, and run unsafe local command paths without enough user control or safeguards.
Review carefully before installing. Use a least-privilege Notion integration scoped only to the intended database, avoid passing tokens directly on command lines, verify the BBDown binary with a trusted checksum or package source, and do not run the automatic duplicate cleanup unless you are comfortable with the skill archiving Notion pages that match the generated title.
print(f"\n🔍 {description}...")
try:
result = subprocess.run(
cmd, shell=True, capture_output=True, text=True, check=True
)
return json.loads(result.stdout)for path in bbdown_paths:
try:
result = subprocess.run(
[path, "--help"], capture_output=True, text=True, timeout=5
)
if result.returncode == 0:pip install requests # 2. 下载BBDown curl -L -o /tmp/BBDown.zip "https://github.com/nilaoda/BBDown/releases/download/1.6.3/BBDown_1.6.3_20240814_linux-x64.zip" unzip /tmp/BBDown.zip -d /tmp/ chmod +x /tmp/BBDown
66/66 vendors flagged this skill as clean.
No suspicious patterns detected.