Security audit
Alibaba Quark Scan Free
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed image/document scanning helper that sends user-provided images to Quark's scan service, with no hidden code or deceptive behavior found in the artifact.
Before installing, verify that you trust the Quark scan service and the package publisher, because images and document contents may be sent to scan-business.quark.cn. Avoid sending highly sensitive documents unless that external processing is acceptable, protect the SCAN_WEBSERVICE_KEY value, and periodically delete generated files from the temporary output directory.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.