Security audit
Ecommerce After Sales Reply
Security checks across malware telemetry and agentic risk
Overview
This is a prompt-only Chinese ecommerce after-sales reply template with no code execution, persistence, credential use, or hidden system access.
Reasonable to install for drafting ecommerce after-sales replies. Users should still verify real platform rules, shop policy, order status, refund timing, addresses, and any customer personal/order details before sending generated text to buyers.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.