Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- src/bridge.js:307
- Evidence
const child = execFile(command, args, options, (error, stdout, stderr) => {
Security audit
誓隆录音笔记与本机智能体连接
Security checks across malware telemetry and agentic risk
Overview
The skill is a disclosed AideNote integration that reads the user's recording notes and can install a persistent local bridge for phone-to-desktop agent access.
Install only if you want AideNote to access your recording notes and connect your phone app to local agent services on this computer. Review the API key, bridge installer URLs, SHA-256 values, local ports, and autostart behavior, and revoke the AideNote API key or remove the bridge if you no longer need remote access.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.dangerous_exec