Umeå Data

Security checks across malware telemetry and agentic risk

Overview

This skill appears to be a straightforward public Umeå municipal open-data lookup tool, with a minor packaging issue in one nearby-search helper.

Reasonable to install if you want public Umeå open-data lookups. Confirm that curl and jq are available, and expect the nearest-location command to fail unless the missing distance.jq helper is supplied or the package is fixed.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Low

Confidence: 88% confidence
Finding: The title and examples throughout the file present the skill as operating in Swedish ('Open Data från Umeå kommun') and all natural-language query examples are Swedish. Because the document says 'The AI can answer questions like' without stating that other languages are also supported, it risks imposing a specific language/locale by default.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal