bilanz

Security checks across malware telemetry and agentic risk

Overview

This skill is a small Austrian balance-sheet template helper that only runs a local script printing static text.

This appears safe to install from a security standpoint, but it is very minimal. Treat it as a static German/Austrian template helper, not as validated accounting, tax, or legal compliance software.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Low

Confidence: 94% confidence
Finding: This shell script emits all user-facing status and balance-sheet labels in German, including the default status output and the --aktiva/--passiva modes. Because the file provides no language selection or opt-in mechanism, it enforces a specific locale in natural-language output.

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal