Security checks across malware telemetry and agentic risk
This Aicoo onboarding skill is not clearly malicious, but it bundles broad local data scanning, cloud upload, social actions, share links, and public posting into a first-time setup flow.
Install only if you are comfortable manually supervising every step. Before using it, limit which files can be scanned, review all upload payloads, avoid secrets and confidential repositories, do not persist API keys in shell startup files unless you accept that risk, and confirm every connection, share-link scope, notes permission, expiration, and public post before execution.
### Step 5: Create first note (OS endpoint)
```bash
curl -s -X POST "https://www.aicoo.io/api/v1/os/notes" \
-H "Authorization: Bearer $AICOO_API_KEY" \
-H "Content-Type: application/json" \
-d '{### Step 6: Bulk sync project docs
```bash
curl -s -X POST "https://www.aicoo.io/api/v1/accumulate" \
-H "Authorization: Bearer $AICOO_API_KEY" \
-H "Content-Type: application/json" \
-d '{### Step 7: Create investor share link
```bash
curl -s -X POST "https://www.aicoo.io/api/v1/os/share" \
-H "Authorization: Bearer ${AICOO_API_KEY:-$PULSE_API_KEY}" \
-H "Content-Type: application/json" \
-d '{-H "Authorization: Bearer $AICOO_API_KEY" | jq . ``` ### Step 4: Explore and collect context Ask startup basics (product, team, traction, boundaries), then scan local files.
VirusTotal findings are pending for this skill version.