Security audit
Security checks across malware telemetry and agentic risk
This is a coherent football prediction skill with local history files and documented external sports and LLM API use, but users should understand the credential, LLM, and local logging tradeoffs.
Install only if you are comfortable giving this skill sports-data and optional LLM API keys. Avoid the relay provider or custom LLM base URLs unless you trust that service, because prompts and keys may pass through it. Treat predictions as local records stored under the skill directory, review exports before sharing, and consider pinning dependencies and clearing error logs if provider failures might have written credential-bearing URLs.
if not deps_ok:
print()
if confirm("现在自动安装依赖？", default=True):
os.system(f"{sys.executable} -m pip install -q requests python-dotenv")
print(f" {GREEN}✓{RESET} 依赖已安装")
else:
print(f" {GRAY}跳过依赖安装。手动跑: pip install -r requirements.txt{RESET}")}
if system:
body["systemInstruction"] = {"parts": [{"text": system}]}
r = requests.post(
f"{self.base}/models/{self.model}:generateContent?key={self.api_key}",
json=body,
timeout=timeout,requests>=2.28 python-dotenv>=1.0
requests>=2.28 python-dotenv>=1.0
67/67 vendors flagged this skill as clean.
No suspicious patterns detected.