Security audit
车辆尽调报告 Pro-标准版(AI付) - 聚合数据
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed paid vehicle due-diligence lookup that limits itself to VIN-related inputs, a fixed third-party API, and masked output.
Before installing, confirm you are comfortable sending the VIN, vehicle type, and accident/modification status to the stated vehicle-data provider and using Alipay for payment. The skill is scoped to a paid vehicle report and repeatedly instructs the agent to validate inputs, avoid extra personal data, avoid local storage, and mask plate numbers.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.