Query company customs trade statistics by region dimension — analyze trade volume, amount,monthly trends, and country distribution across global markets. Perfect for regional tradeanalysis, company import-export country distribution, global trade intelligence, supplier marketcoverage assessment and cross-border market trend monitoring.

• Outcome: Review
• Latest audit: Jul 20, 2026 · 10:05 AM UTC
• Version: 1.0.0

Overview

This skill is a coherent paid customs-data API integration, but it asks the agent to read and write a plaintext API key file and includes account top-up workflows that users should review carefully.

Install only if you trust UpKuaJing with your customs-data queries and account billing flow. Treat ~/.upkuajing/.env as a secret file, avoid displaying it in chat or logs, review any payment URL before opening it, and expect API calls to incur fees after confirmation.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (6)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 88% confidence
• Finding: The skill documentation indicates use of environment variables, filesystem access to ~/.upkuajing/.env, and networked scripts, but it does not clearly declare equivalent permissions or tightly scope those capabilities. This creates an avoidable trust gap: a user may invoke a data-query skill without realizing it can also read local secrets, write credential files, and initiate external API/payment-related actions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 95% confidence
• Finding: The stated purpose is regional customs statistics lookup, but the skill also includes account lifecycle and monetization behaviors: creating API keys, storing them locally, checking balances, generating recharge orders, and fetching pricing. That mismatch is security-relevant because users may authorize a seemingly narrow analytics skill that can also modify local credentials and trigger external billing/account workflows.

Credential Access

High

• Category: Privilege Escalation

Content

### **API Key Not Set**
First check if the `~/.upkuajing/.env` file has UPKUAJING_API_KEY;
If UPKUAJING_API_KEY is not set, prompt the user to choose:
1. User has one: User provides it (manually add to ~/.upkuajing/.env file)
2. User doesn't have one: You can apply using the interface (`auth.py --new_key`), the new key will be automatically saved to ~/.upkuajing/.env
Wait for user selection;

• Confidence: 93% confidence
• Finding: .env

Credential Access

High

• Category: Privilege Escalation

Content

First check if the `~/.upkuajing/.env` file has UPKUAJING_API_KEY;
If UPKUAJING_API_KEY is not set, prompt the user to choose:
1. User has one: User provides it (manually add to ~/.upkuajing/.env file)
2. User doesn't have one: You can apply using the interface (`auth.py --new_key`), the new key will be automatically saved to ~/.upkuajing/.env
Wait for user selection;

### **Account Top-up**

• Confidence: 92% confidence
• Finding: .env

Credential Access

High

• Category: Privilege Escalation

Content

"envFilePath": str(env_file)
        }

    # 保存到 .env 文件
    try:
        with open(env_file, 'w', encoding='utf-8') as f:
            f.write(f"{API_KEY_ENV}={api_key}\n")

• Confidence: 92% confidence
• Finding: .env

Unpinned Dependencies

Low

• Category: Supply Chain

Content

httpx>=0.23.0

• Confidence: 95% confidence
• Finding: httpx>=0.23.0

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: scripts/common.py:196

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: SKILL.md:58