Query paginated product trade data for a company — retrieve product names with trade counts,amounts, quantities, and associated HS codes for product-mix analysis. Enables paginatedproduct queries, company product trade details, import-export product breakdown and tradeproduct drill-down for comprehensive product portfolio understanding.

• Outcome: Review
• Latest audit: Jul 20, 2026 · 10:04 AM UTC
• Version: 1.0.0

Overview

This appears to be a legitimate paid customs-data API helper, with disclosed API-key and billing support that users should handle carefully.

Install only if you are comfortable giving this skill access to your UpKuaJing API key and using paid API calls. Confirm charges before each query, avoid printing ~/.upkuajing/.env, and consider setting restrictive permissions on that file because the skill stores the key in plaintext.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (6)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 91% confidence
• Finding: The skill invokes Python scripts that read environment variables, access local files under ~/.upkuajing, and call external network APIs, but it does not declare corresponding permissions. This creates a transparency and sandboxing gap: hosts or reviewers may underestimate what the skill can access and execute, increasing the chance of unintended credential exposure or filesystem/network misuse.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 95% confidence
• Finding: The advertised purpose is a product trade query skill, but the documented behavior also includes API key issuance, account inspection, recharge order creation, pricing queries, and local metadata caching. This scope expansion is dangerous because users may consent to a data lookup while the skill also performs credential lifecycle and billing-related operations, which materially changes risk and trust assumptions.

Credential Access

High

• Category: Privilege Escalation

Content

### **API Key Not Set**
First check if the `~/.upkuajing/.env` file has UPKUAJING_API_KEY;
If UPKUAJING_API_KEY is not set, prompt the user to choose:
1. User has one: User provides it (manually add to ~/.upkuajing/.env file)
2. User doesn't have one: You can apply using the interface (`auth.py --new_key`), the new key will be automatically saved to ~/.upkuajing/.env
Wait for user selection;

• Confidence: 88% confidence
• Finding: .env

Credential Access

High

• Category: Privilege Escalation

Content

First check if the `~/.upkuajing/.env` file has UPKUAJING_API_KEY;
If UPKUAJING_API_KEY is not set, prompt the user to choose:
1. User has one: User provides it (manually add to ~/.upkuajing/.env file)
2. User doesn't have one: You can apply using the interface (`auth.py --new_key`), the new key will be automatically saved to ~/.upkuajing/.env
Wait for user selection;

### **Account Top-up**

• Confidence: 88% confidence
• Finding: .env

Credential Access

High

• Category: Privilege Escalation

Content

"envFilePath": str(env_file)
        }

    # 保存到 .env 文件
    try:
        with open(env_file, 'w', encoding='utf-8') as f:
            f.write(f"{API_KEY_ENV}={api_key}\n")

• Confidence: 82% confidence
• Finding: .env

Unpinned Dependencies

Low

• Category: Supply Chain

Content

httpx>=0.23.0

• Confidence: 93% confidence
• Finding: httpx>=0.23.0

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: scripts/common.py:196

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: SKILL.md:58