Security audit
投标文件写作工具
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed client for a bid-document cloud service, with expected document upload, App Key use, billing, and local report output.
Before installing, confirm you are comfortable uploading tender and bid files to 招采猫 servers, using an App Key that may be saved locally, and spending account credits for bid generation. Avoid pasting the App Key into chat if that is unacceptable; use the documented local config-file option and verify any configured API base URL is trusted.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.