Security audit

xiaoyuan-calc

Security checks across malware telemetry and agentic risk

Overview

This is a calculator skill that sends user-entered math expressions to a Xiaoyuan/Yuanfudao remote API, with no evidence of credential theft, persistence, destructive behavior, or hidden local access.

Install only if you are comfortable sending each calculation expression to Xiaoyuan/Yuanfudao's service. Avoid entering confidential financial figures, proprietary formulas, private homework/work data, or personal information, and be prepared to provide the requests Python dependency if your environment does not already have it.

SkillSpector

By NVIDIA

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Description-Behavior Mismatch

Medium

Confidence: 97% confidence
Finding: The skill is presented as a local calculator assistant, but user-supplied expressions are transmitted to a third-party remote API for processing. This creates a privacy and trust-boundary issue because users may reasonably expect offline or local computation, and any sensitive content embedded in expressions is disclosed externally without clear disclosure or consent.

Intent-Code Divergence

Medium

Confidence: 95% confidence
Finding: The docstring states that the script itself performs accurate mathematical operations, but the implementation is only a proxy to an external API. This is a deceptive capability description that can mislead reviewers and users about execution, reliability, and data exposure, making informed security decisions harder.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal