Security audit
噗滋慈善 - 申报助手 / pozzzi-charity application-assistant
Security checks across malware telemetry and agentic risk
Overview
This is a coherent NGO funding-application drafting helper with disclosed model use and local logging, and I found no hidden execution, credential theft, purchases, or destructive behavior.
Before installing, confirm which model provider and storage adapter your environment will use, because application and budget details may be sent to that provider and limited local history is retained. Treat outputs as drafts, manually fill placeholders, and review all legal, financial, and submission details before use.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.