Security audit
Zhima
Security checks across malware telemetry and agentic risk
Overview
This is a guidance-only Zhima Credit skill with no code, credential handling, persistence, or hidden system access.
This skill appears safe to install as an informational guide. Users should still avoid sharing unnecessary personal financial details with an agent and should verify current Zhima Credit, Alipay, visa, or central-bank credit-report procedures through official channels because policies can change.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.