Software Quotation Skill

• Outcome: Pass
• Latest audit: May 28, 2026, 2:23 AM
• Version:
  1.0.0

Overview

This is a coherent software quotation-writing skill with no evidence of credential access, persistence, destructive behavior, or hidden data collection.

Install only if you want a Chinese-language assistant for software project quotations. Review all generated estimates and contract terms before sending them to clients, and avoid opening or sharing generated HTML with sensitive client data unless you are comfortable with the cdnjs-hosted PDF export libraries or replace them with trusted local copies.

Publisher note

Quotation Writer is a specialized agent skill for creating professional software project quotations. It guides users through structured requirement analysis, work breakdown, and generates a polished HTML quotation document ready for client delivery. Features: - Structured requirements clarification (Product / Design / Tech dimensions) - Workload estimation with role × day matrix (PM, UI, Backend, Frontend, QA) - Detailed scope definition (In Scope / Out of Scope / Assumptions) - HTML quotation document with professional design and PDF export - Risk-aware pricing with milestone planning and payment terms Ideal for: Freelancers, agencies, and consultants who need to produce client-ready project quotations quickly and professionally. Output: A single HTML file — open in browser, export to PDF with one click.

Show more

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The skill description uses very broad trigger phrases such as '帮我做一份报价', '帮我分析工作量', and related natural-language variants, which can overlap with ordinary conversation and cause the skill to activate when the user did not explicitly intend to invoke it. In an agent environment, this can lead to misrouting, unintended workflow execution, and generation of authoritative-looking outputs based on incomplete context.

VirusTotal

VirusTotal findings are pending for this skill version.