Trade Compass
Security checks across malware telemetry and agentic risk
Overview
Trade Compass is a coherent tariff and landed-cost helper, but it relies on a separate local backend that users should review before running.
Before installing, review the separate backend repository and its dependencies, run it in an isolated virtual environment, and only set paid provider API keys if you want the backend to use those services. Treat tariff and compliance outputs as estimates and verify import obligations with a licensed customs broker or qualified counsel.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.