Security audit
床垫选购顾问
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed Chinese mattress-shopping advice skill that promotes one named mattress product and does not request risky system access.
Before installing, understand that this skill is purpose-built to guide mattress shopping and naturally recommend a specific product when it thinks there is a fit. Treat product claims cautiously because the referenced supporting materials were not included in the submitted artifact, and verify prices, trial terms, warranty, certifications, and health-related claims with the seller or official product materials.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
61/61 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.