Security audit
Security checks across malware telemetry and agentic risk
This skill’s music-generation purpose is coherent, but it handles sensitive voice-cloning data and deploys broad local services without enough consent, privacy, credential, and scoping safeguards.
Review this skill carefully before installing. Use it only with voices you own or have explicit permission to clone, run it in an isolated environment, avoid custom requirements files, inspect the Docker images, change all default MinIO and JWT secrets, bind services to private interfaces, and require clear retention/deletion controls for uploaded voice samples and trained voice models.
try:
print("📦 安装 Python 依赖...")
result = subprocess.run([
sys.executable, '-m', 'pip', 'install', '-r', requirements_file,
'--no-cache-dir', '--upgrade'
], capture_output=True, text=True)# 检查运行中的容器
try:
ps_result = subprocess.run(['docker', 'ps', '--format', 'json'],
capture_output=True, text=True)
if ps_result.returncode == 0:
# 解析 JSON 格式的容器列表# 检查运行中的容器
try:
ps_result = subprocess.run(['docker', 'ps', '--format', 'json'],
capture_output=True, text=True)
if ps_result.returncode == 0:
# 解析 JSON 格式的容器列表VirusTotal findings are pending for this skill version.
No suspicious patterns detected.