deepscan-login
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the local Python script
scripts/auth.pyto perform authentication tasks, including initializing the login process, polling for status updates, and retrieving or saving tokens locally. - [EXTERNAL_DOWNLOADS]: It communicates with the vendor's official API endpoints at
https://data.cli.im/x-deepscanandhttps://qr67.cnto obtain authorization details and QR code images. - [DATA_EXFILTRATION]: The skill reads and writes session credentials to the local file
~/.deepscan/tokento maintain persistent login status, which is the intended functionality for its primary purpose.
Audit Metadata