Security audit
career-planner-china
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed career-planning assistant that mainly uses bundled reference data and only describes optional report, memory, email, subscription, or live-data integrations when the user explicitly asks.
Before installing, be aware that the skill may ask for personal education, career, preference, and location details to produce advice. By default it should work from bundled data, but only approve report export, memory tracking, email sending, subscriptions, or live job-data lookup when you actually want those actions. Insurance-company recommendations are included for users interested in insurance careers, so compare them independently before acting on them.
SkillSpector
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.