Security audit
DEM Downloader / DEM 下载器
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed DEM downloader whose network, credential, and local file behaviors are aligned with its stated mapping purpose.
Install only if you are comfortable with the skill contacting the listed DEM providers and map.ruiduobao.com for Chinese administrative boundaries. Choose output paths carefully because large downloads can create substantial tile directories, manifests, partial files, and optional caches. If using OpenTopography or Earthdata credentials, set only the documented environment variables and review generated provenance before publishing or redistributing data.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.