流体网络求解器

• Outcome: Review
• Latest audit: May 29, 2026 · 8:23 PM UTC
• Version: 1.0.0

Overview

This skill is a disclosed local fluid-network calculator and I found no evidence of hidden data access, exfiltration, persistence, or destructive behavior.

Install only if you need a local engineering calculation aid for TOML-described, steady linear fluid networks. Treat results as advisory, especially for real hydraulic, chemical, safety-critical, transient, or compressible systems, and consider removing the bundled virtual environment in favor of installing the listed dependencies cleanly.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The activation conditions are broad ('用户需要分析流体网络', '需要计算管路流量和压力分布') and could cause the orchestrator to invoke this skill in situations where inputs are incomplete, unrelated, or safety-critical without tighter scoping. Over-broad invocation increases the chance of misuse, incorrect analysis, or the model treating untrusted input as valid engineering data, which can mislead downstream decisions.

VirusTotal

63/63 vendors flagged this skill as clean.

Static analysis

Detected: suspicious.dynamic_code_execution, suspicious.exposed_secret_literal, suspicious.insecure_tls_verification (+1 more)

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/_core/arrayprint.py:1568

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/_core/tests/test_arrayprint.py:339

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/_core/tests/test_dtype.py:1070

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/_core/tests/test_multiarray.py:1663

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/_core/tests/test_records.py:170

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/_core/tests/test_scalarmath.py:618

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/_core/tests/test_simd.py:244

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/_core/tests/test_umath_accuracy.py:77

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/_core/tests/test_umath.py:512

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/f2py/auxfuncs.py:632

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/f2py/capi_maps.py:159

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/f2py/crackfortran.py:1329

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/random/tests/test_extending.py:111

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/testing/_private/extbuild.py:78

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/tests/test_lazyloading.py:26

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/tests/test_public_api.py:405

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/numpy/typing/tests/test_typing.py:205

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/pip/_vendor/packaging/licenses/__init__.py:100

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: venv/Lib/site-packages/pip/_vendor/pygments/formatters/__init__.py:91

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: venv/Lib/site-packages/pip/_internal/network/auth.py:94

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: venv/Lib/site-packages/pip/_vendor/requests/adapters.py:257

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: venv/Lib/site-packages/pip/_vendor/requests/sessions.py:322

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: venv/Lib/site-packages/pip/_vendor/urllib3/connection.py:423

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: venv/Lib/site-packages/pip/_vendor/urllib3/connectionpool.py:991

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: venv/Lib/site-packages/pip/_vendor/urllib3/contrib/_securetransport/low_level.py:231

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: venv/Lib/site-packages/pip/_vendor/urllib3/contrib/socks.py:102

HTTPS certificate verification is disabled.

Warn

• Code: suspicious.insecure_tls_verification
• Location: venv/Lib/site-packages/numpy/_core/multiarray.py:112

HTTPS certificate verification is disabled.

Warn

• Code: suspicious.insecure_tls_verification
• Location: venv/Lib/site-packages/numpy/_core/tests/test_overrides.py:294

HTTPS certificate verification is disabled.

Warn

• Code: suspicious.insecure_tls_verification
• Location: venv/Lib/site-packages/numpy/lib/_ufunclike_impl.py:16

HTTPS certificate verification is disabled.

Warn

• Code: suspicious.insecure_tls_verification
• Location: venv/Lib/site-packages/pip/_internal/network/session.py:311

HTTPS certificate verification is disabled.

Warn

• Code: suspicious.insecure_tls_verification
• Location: venv/Lib/site-packages/pip/_vendor/truststore/_macos.py:371

HTTPS certificate verification is disabled.

Warn

• Code: suspicious.insecure_tls_verification
• Location: venv/Lib/site-packages/pip/_vendor/truststore/_windows.py:458

HTTPS certificate verification is disabled.

Warn

• Code: suspicious.insecure_tls_verification
• Location: venv/Lib/site-packages/pip/_vendor/urllib3/connection.py:454

HTTPS certificate verification is disabled.

Warn

• Code: suspicious.insecure_tls_verification
• Location: venv/Lib/site-packages/pip/_vendor/urllib3/contrib/pyopenssl.py:113

HTTPS certificate verification is disabled.

Warn

• Code: suspicious.insecure_tls_verification
• Location: venv/Lib/site-packages/pip/_vendor/urllib3/contrib/securetransport.py:794

HTTPS certificate verification is disabled.

Warn

• Code: suspicious.insecure_tls_verification
• Location: venv/Lib/site-packages/pip/_vendor/urllib3/util/ssl_.py:140

Potential obfuscated payload detected.

Warn

• Code: suspicious.obfuscated_code
• Location: venv/Lib/site-packages/numpy/_core/strings.py:570

Potential obfuscated payload detected.

Warn

• Code: suspicious.obfuscated_code
• Location: venv/Lib/site-packages/numpy/_core/tests/test_arrayprint.py:332

Potential obfuscated payload detected.

Warn

• Code: suspicious.obfuscated_code
• Location: venv/Lib/site-packages/numpy/_core/tests/test_defchararray.py:820

Potential obfuscated payload detected.

Warn

• Code: suspicious.obfuscated_code
• Location: venv/Lib/site-packages/numpy/_core/tests/test_longdouble.py:360

Potential obfuscated payload detected.

Warn

• Code: suspicious.obfuscated_code
• Location: venv/Lib/site-packages/numpy/_core/tests/test_multiarray.py:4626

Potential obfuscated payload detected.

Warn

• Code: suspicious.obfuscated_code
• Location: venv/Lib/site-packages/numpy/_core/tests/test_regression.py:2573

Potential obfuscated payload detected.

Warn

• Code: suspicious.obfuscated_code
• Location: venv/Lib/site-packages/numpy/lib/tests/test_format.py:573

Potential obfuscated payload detected.

Warn

• Code: suspicious.obfuscated_code
• Location: venv/Lib/site-packages/numpy/lib/tests/test_io.py:707

Potential obfuscated payload detected.

Warn

• Code: suspicious.obfuscated_code
• Location: venv/Lib/site-packages/numpy/random/tests/test_generator_mt19937.py:972