Security audit

维表智联系统生成

Security checks across malware telemetry and agentic risk

Overview

This skill is a legitimate Dimens business-system orchestrator, but it can drive real workspace changes and includes under-scoped defaults that could expose or alter business data.

Review this skill before installing. Use least-privilege Dimens credentials, verify the dimens-cli source, ask the agent to show the exact commands and affected resources before execution, avoid public views unless you explicitly need them, and require separate confirmation for deletes, permission changes, workflow publishing, and bulk data updates.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The command mapping includes a destructive operation (`dimens-cli doc delete`) as a normal workflow option without requiring explicit confirmation, backup, or a user-intent check. In an orchestration skill, this increases the chance that an agent may delete documents based on ambiguous prompts or automation errors, causing irreversible data loss.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The document recommends creating a public default view (`--is-public true`) as part of the default build path, without warning about exposure of business data or requiring a privacy review. In a system-orchestration skill for CRM and business platforms, making views public by default can unintentionally expose customer or operational data to unauthorized users.

Missing User Warnings

Medium

Confidence: 83% confidence
Finding: 该文档系统性描述了创建项目、上传文件、写入数据、配置权限和工作流等高影响操作，但缺少统一、醒目的风险提示与执行前确认机制。对于一个系统级编排技能，这会放大误操作风险：代理可能在用户表达不充分时执行真实变更，导致资源被批量创建、权限被错误配置或业务数据被污染。

Missing User Warnings

High

Confidence: 92% confidence
Finding: 修改项目内数据章节虽然要求先读后改和最小变更，但没有明确要求向用户发出真实数据变更警告、确认影响范围或在高风险操作前二次确认。由于该技能面向真实项目资源，若代理依据自然语言直接执行更新，可能造成生产数据错误修改、结构变更破坏兼容性、权限异常或难以恢复的业务中断。

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.