物流与关税优化师

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:35 PM UTC
• Version:
  1.0.0

Overview

This is a simple advisory skill for EU shipping, customs, and tax guidance, with no code or hidden system access.

Before installing, understand that the skill may activate on broad shipping questions and may ask for shipment details needed for logistics or tariff estimates. Avoid sharing unnecessary sensitive business information, and verify tax, VAT, and customs conclusions with official sources or a qualified professional before relying on them.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The trigger phrases are broad, generic shopping and shipping terms that could easily appear in normal conversation, which increases the chance this skill is invoked when the user did not explicitly request it. Unintended invocation can route user queries into plugin-backed tax/compliance logic and produce irrelevant or confusing outputs, especially in multilingual commerce contexts.

VirusTotal

65/65 vendors flagged this skill as clean.