Security audit
Tencent Yuanbao Gaokao - Score-to-Rank Lookup
Security checks across malware telemetry and agentic risk
Overview
This skill is a focused GaoKao score/rank lookup helper that runs a local Python script to query Tencent GaoKao data, with no evidence of hidden persistence, credential access, destructive behavior, or exfiltration beyond the expected lookup request.
Install only if you are comfortable with GaoKao lookup parameters such as province, year, subject category, score, and rank being sent to Tencent's gaokao.search.qq.com service when the skill is used. No local credential or persistence behavior was found.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.