Security audit

Food Factory Cost Pricing

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only food factory costing and pricing helper with no hidden code or persistence, though its broad trigger phrases may activate it for generic business pricing questions.

Install it if you need food factory cost and pricing worksheets. Verify outputs against your own accounting rules and be aware that generic pricing or margin questions may trigger this skill even when the context is not food manufacturing.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 90% confidence
Finding: The trigger list is broad and contains common business phrases such as '毛利率', '生产成本', and '出厂价', which can overlap with ordinary conversations outside the intended narrow skill scope. This can cause unintended activation and route unrelated user data or requests into the skill, increasing the chance of inappropriate responses or over-collection/use of contextual business information.

Vague Triggers

Medium

Confidence: 82% confidence
Finding: The activation description enumerates broad themes without clearly stating exclusions or decision boundaries, so the system may invoke the skill for loosely related pricing or cost questions. In practice this raises the risk of misrouting user intent and generating authoritative-seeming cost/pricing outputs in contexts the skill was not designed to handle.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.