Security audit
QuakeProof — USGS Earthquake Shaking Lookup
Security checks across malware telemetry and agentic risk
Overview
This skill is a clearly scoped earthquake lookup that discloses its third-party address lookup and requires user consent before sending data.
Before installing, understand that using this skill for a property lookup will transmit the street address to hurricaneinspections.com after consent, and that service says it logs the request. This is expected for the skill's purpose, but users handling third-party, insurance, litigation, or real-estate addresses should consider privacy and discoverability before proceeding.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.