Security audit
market-demand-assessment
Security checks across malware telemetry and agentic risk
Overview
This skill is a local market-demand screening template with no hidden execution, network submission, persistence, or destructive behavior found.
Before installing, users should understand that the workflow may involve sensitive customer inquiry and internal product information. The included template appears local-only, but any configured Zhihuiya MCP/database integration should be reviewed separately for data access scope and account authorization.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.