Security audit
Futures Inquiry - 期货查询
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward futures market data lookup tool that sends a user-provided JisuAPI key to the documented JisuAPI futures endpoints.
Before installing, understand that your JISU_API_KEY will be sent to JisuAPI as part of futures data requests. Use it for informational market data only, verify important prices with an official source, and ensure the Python requests package is available.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
59/59 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.