Delaware Franchise Tax

• Outcome: Review
• Latest audit: May 29, 2026 at 9:34 PM UTC
• Version:
  0.1.0

Overview

This skill is mostly a legitimate Delaware tax-filing guide, but it includes under-scoped automation guidance for a live government filing portal, including CAPTCHA image extraction.

Use this primarily as a calculation checklist and filing guide. Before installing or using automation, understand that it may drive a live government filing portal; keep CAPTCHA solving, final review, submission, and all payment details manual, and avoid connecting broad banking or cloud-storage access unless strictly needed.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The notes explicitly recommend programmatically fetching CAPTCHA image bytes as a fallback during automation, which facilitates automated CAPTCHA handling on a government filing portal. Even if not paired with OCR here, this materially lowers the barrier to bypassing an anti-automation control and could enable scripted filing attempts or abuse of the portal. In this skill context, the risk is elevated because the target is a live Delaware state filing system handling official submissions and payments.

VirusTotal

66/66 vendors flagged this skill as clean.