BI Analyst

Security checks across malware telemetry and agentic risk

Overview

This appears to be a straightforward BI career-roadmap API, with the main caution that personal career details are sent to an external provider.

Before using this skill, treat the assessment as information shared with the API provider. Avoid confidential employer, client, compensation, or sensitive personal details, and prefer a pseudonymous or omitted userId unless you trust the provider's privacy practices.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The skill explicitly solicits user identifiers and detailed career-assessment data, including session IDs, timestamps, role history, skills, and goals, but provides no privacy notice, data-handling explanation, retention policy, or warning that this information will be transmitted to a third-party API. This creates a real privacy and data-governance risk because users may disclose personal or employer-sensitive professional information without informed consent.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal