Security audit
Offer Profitability Checker
Security checks across malware telemetry and agentic risk
Overview
This skill is a low-risk ecommerce profitability helper made only of markdown instructions, with no hidden access, persistence, or credential use found.
Safe to install from a security perspective. Users should verify business assumptions and review any generated Python script before relying on it for pricing or launch decisions, and non-Chinese users may need to ask the agent to respond in their preferred language.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.