Security audit
Tianapi Dgryl - 打工人语录
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward TianAPI quote-fetching skill with ordinary API-key handling cautions, not hidden or unsafe behavior.
Prefer setting TIANAPI_DGRYL_KEY through your shell or a managed secret store. Avoid passing the key on the command line, and if you use scripts/.env, keep it out of version control and restrict file access.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.