Security audit
Flashcard Maker / 背单词卡片
Security checks across malware telemetry and agentic risk
Overview
This skill appears security-benign, but it looks more like a promotional placeholder than a complete flashcard tool.
From a security perspective this is low risk: it does not install code or request sensitive access. Before installing, note that it appears limited in actual flashcard functionality and includes external promotional/affiliate links, so treat it as a lightweight placeholder unless the publisher provides a fuller implementation.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.