Security audit
Security checks across malware telemetry and agentic risk
This finance skill is mostly coherent, but it needs review because its optional social scanners rely on sensitive X session cookies and an external CLI with broad environment access.
Review before installing. The core finance analysis appears purpose-aligned, and VirusTotal/static scan did not show malware, but avoid using the optional X/Twitter setup unless you understand that auth_token and ct0 are live session credentials. Do not grant broad Full Disk Access or place unrelated secrets in the skill .env; prefer running stock analysis with --no-social or --fast modes unless the social scanners are necessary.
for category, query in searches:
try:
env = os.environ.copy()
result = subprocess.run(
[bird_bin, "search", query, "-n", "15", "--json"],
capture_output=True, text=True, timeout=30, env=env
)64/64 vendors flagged this skill as clean.
No suspicious patterns detected.