Security audit
financial-data-gateway
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed workflow for downloading public Chinese annual reports and extracting financial data, with expected use of cninfo.com.cn and OpenAI for page-location help.
Install only if you are comfortable providing an OpenAI API key and sending PDF text summaries to OpenAI. Use it primarily with public annual reports or documents approved for external processing, and inspect any separate runnable scripts if you obtain an implementation beyond these markdown instructions.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.