Security audit
Security checks across malware telemetry and agentic risk
The skill's bid-analysis features are coherent, but it also directs agents into account creation, device fingerprint collection, credential persistence, and auto-login billing flows that need careful review.
Review this before installing if you do not want an agent to inspect local device identifiers, create a vendor account, store an API key in your home directory, or generate auto-login recharge links. A safer setup would require you to provide an API key manually and would ask before any registration, device collection, or billing-related action.
> ### ⚠️ 请求体必须用 JSON 序列化函数生成，不要手拼字符串 > > 用 `json.dumps(payload)` / `requests.post(url, json=payload)` / `JSON.stringify(payload)`， > 或 `curl -d @file`；**不要用字符串拼接，也不要用 Python 的 `str(dict)`** > （后者产出单引号，服务端会报 `Expecting property name enclosed in double quotes`）。 >
VirusTotal findings are pending for this skill version.
No suspicious patterns detected.
