Security audit
丝路财会修行记
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed Kazakhstan tax and finance reference assistant with packaged public-source data and no evidence of hidden execution or data access.
Installers should treat this as a specialist informational aid, not a substitute for licensed local tax advice. It may point users to government, banking, tax, and payment portals, so verify URLs independently before submitting personal, business, or payment credentials.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.