Security audit
Huaxiaozhu
Security checks across malware telemetry and agentic risk
Overview
This is a static ride-hailing advice skill with no executable code, credential use, persistence, or sensitive local access.
Installers should treat this as general travel advice, not authoritative live pricing or policy data. Check the Huaxiaozhu app for current fares, coupons, city availability, and safety features before relying on specific claims.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.