Security audit
Product Differentiation Shopify
Security checks across malware telemetry and agentic risk
Overview
The skill does not appear to steal data or modify the system, but it overstates its Shopify analysis capabilities and ignores the documented user inputs.
Review this carefully before installing if you expect real Shopify competitor analysis. The code appears locally safe, but its current report is demo-style and may not use your provided store or competitor inputs, so do not rely on it for business decisions unless the implementation or documentation is corrected.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.