Security audit
china-export-data
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward data lookup guide for China export statistics and does not request dangerous local access or persistence.
Before installing, understand that using the skill sends product or HS-code lookup requests to DouMaoTong and that free endpoints return ranked subsets rather than complete market lists. There is no evidence of unsafe local behavior in the artifact.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.