Security audit
每日穿衣指南
Security checks across malware telemetry and agentic risk
Overview
This is a narrow daily clothing color advice skill that runs a local Python date-calculation script and does not access private data or the network.
Install this if you are comfortable with the agent running the bundled Python script to calculate daily recommendations. It appears self-contained and does not request credentials, access private files, use the network, or persist anything.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.