Security checks across malware telemetry and agentic risk
This appears to be a real LRC lyrics editor, but its local web server is exposed too broadly and allows unauthenticated upload and shutdown actions.
Install only if you are comfortable running a local Flask app that installs Python packages. Before use, bind the server to 127.0.0.1 instead of 0.0.0.0, run it in a virtual environment, sanitize upload filenames, and clear browser storage after editing sensitive lyrics.
def install_package(package):
"""安装Python包"""
subprocess.check_call([sys.executable, "-m", "pip", "install", package])
def check_dependencies():
"""检查并安装依赖"""63/63 vendors flagged this skill as clean.