返利计算器

Security checks across malware telemetry and agentic risk

Overview

This is a simple rebate and discount calculator skill with broad but low-impact trigger phrases and no code, credentials, network access, or persistence.

Safe to install for manual rebate and final-price calculations. Be aware it may activate on generic shopping price questions; confirm the arithmetic and retailer rebate rules before relying on the result for a purchase.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The trigger phrases are broad enough to match ordinary shopping and price-comparison requests, which can cause the skill to activate outside the user's clear intent. This creates an overreach/problematic routing risk: users may be funneled into this skill unexpectedly, leading to confusing behavior or interference with other more appropriate skills.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal