proj地理坐标系投影转换

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:26 PM UTC
• Version:
  1.0.0

Overview

This is a small GIS coordinate-system advice skill with no executable code, credential access, persistence, or data-changing behavior.

Safe to install for CRS and projection guidance. Users should still verify EPSG codes, datum transformations, local grid requirements, and axis order before applying advice to important GIS, engineering, or survey data.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: This manifest allows the skill to be invoked implicitly, but the file does not define any narrow trigger phrases, scope limits, or negative examples. That makes activation conditions ambiguous and increases the risk of unintended invocation from broad project-related conversation.

VirusTotal

66/66 vendors flagged this skill as clean.