整整600集 E1aeca

• Outcome: Pass
• Latest audit: Jun 2, 2026, 2:27 AM
• Version:
  1.0.0

Overview

This is a simple markdown guide to Python web-scraping learning resources, with no executable code or hidden access behavior.

Safe to install as a learning-resource guide. Be aware it may activate on broad Chinese scraping-related terms, so users who want tighter control may prefer narrowing the trigger phrase before use.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The trigger scenarios are overly broad and include ordinary topic mentions like '整整600集' or generic requests for related help, which can cause the skill to activate when the user did not explicitly ask for it. That increases the risk of unintended routing, prompt hijacking of unrelated conversations, or inappropriate insertion of this skill's guidance into benign requests.

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The manifest trigger field contains broad phrases like '爬虫' and the tutorial title fragments, which are common topic terms rather than precise invocation commands. This can make the skill activate across many ordinary discussions about web scraping or learning resources, creating unnecessary exposure and reducing user control over when the skill runs.

VirusTotal

64/64 vendors flagged this skill as clean.