查询分析报告-区域分布 — 按国家/地区维度分析指定HS编码的贸易区域分布数据，支持出口国/进口国类型筛选和最近月数筛选。返回每个国家的贸易次数、贸易金额、采购商数量和供应商数量等关键指标，帮助贸易分析师、市场研究人员和进出口从业者了解产品在全球各国的贸易分布情况、比较出口国与进口国的贸易活跃度、识别重点目标市场——覆盖全球220多个国家和地区的海关贸易数据，是区域市场分析和贸易地理分布研究的核心工具。

• Outcome: Review
• Latest audit: Jul 20, 2026 · 10:58 AM UTC
• Version: 1.0.0

Overview

This is a coherent paid customs-data API helper, but it stores an API key locally and can start account/recharge support flows.

Install only if you trust Upkuajing with the customs queries and billing account involved. Protect ~/.upkuajing/.env, avoid pasting or displaying the API key unnecessarily, review any recharge payment URL before opening it, and confirm billable API calls only when you are ready to incur the stated fees.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (6)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 94% confidence
• Finding: The skill declares no permissions, but its instructions clearly require reading environment variables, accessing local files under ~/.upkuajing, writing API keys to disk, and making network calls to external services. This mismatch weakens user consent and review because operators may believe the skill is limited to data lookup when it can also handle credentials and persistent local state.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 97% confidence
• Finding: The stated purpose is HS-code area analysis, but the documented behavior also includes API key provisioning, credential storage, account inspection, pricing lookups, recharge order creation, and version-check/cache behavior. This expands the trust boundary far beyond analytics and could lead users to approve a seemingly harmless data query skill that can also modify local credential state and initiate billing-related flows.

Credential Access

High

• Category: Privilege Escalation

Content

### **API密钥未设置**
首先检查 `~/.upkuajing/.env` 文件中是否有 UPKUAJING_API_KEY；
如果未设置，请让用户选择：
1. 用户已有密钥：用户提供（手动添加到 ~/.upkuajing/.env 文件）
2. 用户没有密钥：通过界面申请（`auth.py --new_key`），新密钥会自动保存到 ~/.upkuajing/.env
等待用户选择；

• Confidence: 92% confidence
• Finding: .env

Credential Access

High

• Category: Privilege Escalation

Content

首先检查 `~/.upkuajing/.env` 文件中是否有 UPKUAJING_API_KEY；
如果未设置，请让用户选择：
1. 用户已有密钥：用户提供（手动添加到 ~/.upkuajing/.env 文件）
2. 用户没有密钥：通过界面申请（`auth.py --new_key`），新密钥会自动保存到 ~/.upkuajing/.env
等待用户选择；

### **账户充值**

• Confidence: 95% confidence
• Finding: .env

Credential Access

High

• Category: Privilege Escalation

Content

"envFilePath": str(env_file)
        }

    # 保存到 .env 文件
    try:
        with open(env_file, 'w', encoding='utf-8') as f:
            f.write(f"{API_KEY_ENV}={api_key}\n")

• Confidence: 87% confidence
• Finding: .env

Unpinned Dependencies

Low

• Category: Supply Chain

Content

httpx>=0.23.0

• Confidence: 95% confidence
• Finding: httpx>=0.23.0

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: scripts/common.py:196