test转储

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:17 PM UTC
• Version:
  1.0.1

Overview

This is a disclosed data-transfer automation skill, but users should treat it as capable of importing data into another system if they implement or run the referenced script.

Install only if you intend to move data between these systems. Verify the target URLs, review the generated Excel file before import, test outside production first, use least-privilege accounts, and enable cron only after confirming repeated imports are safe.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The skill explicitly automates exporting data from one system and importing it into another, but it does not warn users that it will modify data in the target system or recommend validation before import. In an RPA/data-transfer context, this omission increases the risk of accidental bulk changes, propagation of bad data, or unintended uploads to the wrong environment.

VirusTotal

65/65 vendors flagged this skill as clean.