Vietnam Realestate

Security checks across malware telemetry and agentic risk

Overview

This is a coherent Vietnam real-estate research skill with a small local calculator; its file creation and web-search behavior are expected for its purpose.

Use this as research support, not as legal, tax, or investment advice. Avoid including unnecessary personal identifiers or exact private financial details in search-driven requests, verify prices and legal/tax claims against current official sources, and review any generated report before sharing it.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 84% confidence
Finding: The skill instructs the agent to generate a .docx report without requiring explicit user confirmation or warning about file creation and potential persistence of sensitive property, legal, or financial information. In practice, this can lead to unintended artifact generation, retention of user data, or disclosure if generated files are stored, shared, or surfaced elsewhere in the environment.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal