Security checks across malware telemetry and agentic risk
The skill presents itself as a cognitive engine, but its artifacts describe broader and under-disclosed behavior including background services, broad memory, external model fallback, and possible self-modifying workflows.
Review this skill carefully before installing. The main issue is not a malware signature or VirusTotal result, but that the artifacts describe significant local runtime authority, persistence, memory retention, and possible external data flow without consistent disclosure. Only use it in a contained environment after confirming how the daemon starts and stops, what data is stored, when external LLM calls happen, and whether any self-updating or commit/push behavior is disabled or explicitly user-approved.
# 验证（仅语法检查，不执行代码）
import subprocess
result = subprocess.run(['node', '--check', filepath],
capture_output=True, text=True)
if result.returncode == 0:
print('✅ 语法检查通过')print(f'✅ 替换完成 (删除了 {len(old_bash)} 字符，新增 {len(new_bash)} 字符)')
# 验证（仅语法检查，不执行代码）
result = subprocess.run(['node', '--check', filepath],
capture_output=True, text=True)
if result.returncode == 0:
print('✅ 语法检查通过')print(f'行 {i+1}: {repr(line)}')
# 验证（仅语法检查，不执行代码）
result = subprocess.run(['node', '--check', filepath],
capture_output=True, text=True)
if result.returncode == 0:
print('✅ 语法检查通过')# 验证（仅语法检查，不执行代码）
try:
import subprocess
result = subprocess.run(['node', '--check', filepath],
capture_output=True, text=True)
if result.returncode == 0:
print('✅ 语法检查通过')print('✅ 修复成功')
# 验证（仅语法检查，不执行代码）
result = subprocess.run(['node', '--check', filepath],
capture_output=True, text=True)
if result.returncode == 0:
print('✅ 语法检查通过')VirusTotal findings are pending for this skill version.