Security audit
微博创作者数据 SocialDataX 创作者资料
Security checks across malware telemetry and agentic risk
Overview
This skill is a read-only Weibo creator profile lookup that coherently uses a SocialDataX API key and npm CLI for its stated purpose.
Install this only if you trust SocialDataX and are comfortable letting the agent use SOCIALDATAX_API_KEY to make network requests for Weibo profile data. Review npm package provenance as you would for any npx-based skill, and avoid using it for private or account-changing actions because the skill is intended only for read-only profile lookup.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.