Security audit
China Shopping Assistant
Security checks across malware telemetry and agentic risk
Overview
This skill is a shopping comparison helper with clear limits against logging in, placing orders, or handling payment details.
Use this as price and risk guidance only. Do not let the agent log in, solve account checks, enter addresses or payment details, submit orders, or initiate payment; verify final prices and seller terms yourself before buying.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.