AI PC Builder

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:41 PM UTC
• Version:
  1.0.0

Overview

This is a disclosed Newegg PC-building helper that sends relevant build and compatibility questions to Newegg without installing extras, persisting data, or requesting credentials.

Install this if you are comfortable with PC build questions, budgets, and component lists being sent to Newegg's MCP service. For ambiguous or sensitive purchasing context, ask the agent to confirm before using the external tool or to answer from general knowledge instead.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 84% confidence
• Finding: The trigger text is intentionally broad, instructing invocation for nearly any PC-building, compatibility, or component-selection request, even when the user does not explicitly ask for Newegg or external lookup. In context, this increases the chance of unnecessary tool activation and data sharing to the Newegg MCP service, expanding exposure beyond the minimum needed for the user’s request.

VirusTotal

67/67 vendors flagged this skill as clean.