business-growth

Security checks across malware telemetry and agentic risk

Overview

This is a coherent business-analysis skill package that runs local JSON-based tools and templates, with no evidence of hidden data access or unsafe behavior.

Install only if you are comfortable processing business-sensitive customer, sales, revenue, and legal drafting data locally with these tools. Redact secrets, unnecessary personal data, security architecture details, and internal-only opinions before using or sharing generated outputs, and have generated contracts reviewed by qualified counsel.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The skill description contains very broad trigger phrases such as 'retention analysis' and 'customer analytics' alongside many common business terms. In agent environments that auto-select skills from natural language descriptions, this can cause the skill to activate for loosely related requests, leading to unnecessary execution of its Python tools on user-provided files or business data.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal