Security audit
Swiss Public Transport
Security checks across malware telemetry and agentic risk
Overview
This skill appears to only look up Swiss public transport schedules through a disclosed public API.
Reasonable to install for Swiss transit lookups. Be aware that route queries, including origin, destination, date, and time, are sent to transport.opendata.ch, so avoid using it for travel details you consider sensitive.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.