保险科技智能引擎

• Outcome: Pass
• Latest audit: Jun 12, 2026 at 11:47 AM UTC
• Version:
  1.0.0

Overview

This documentation-only insurance assistant is purpose-aligned and has no executable behavior, but users should handle medical and claims data carefully.

Before installing, treat this as a high-sensitivity insurance advisory skill. Redact unnecessary personal identifiers, avoid sharing more medical or claims detail than needed, confirm consent and lawful basis for processing, and have qualified professionals verify underwriting, claims, regulatory, and compliance outputs before acting on them.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The skill explicitly covers underwriting, claims review, and medical report interpretation, which inherently involve highly sensitive personal, financial, and health data. Without any warning, consent guidance, minimization requirements, or handling restrictions, users may provide regulated data into the system in unsafe or noncompliant ways, increasing privacy, confidentiality, and regulatory risk.

VirusTotal

64/64 vendors flagged this skill as clean.