Security audit
Zhihu Hot CN
Security checks across malware telemetry and agentic risk
Overview
This skill fetches public Zhihu trending-topic data from a disclosed GitHub source and shows no hidden access to files, accounts, credentials, or persistence.
Reasonable to install if you are comfortable with it making an outbound request to GitHub for public Zhihu hot-list data. Treat the results as third-party content, and do not expect the advertised category filtering or trend-analysis commands to work unless those missing scripts are separately provided and reviewed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.