Auto Llm 1644

• Outcome: Pass
• Latest audit: Jun 4, 2026, 8:44 AM
• Version:
  1.0.0

Overview

This is a simple AI weekly-report skill; its broad "llm" trigger may fire unexpectedly, but there is no evidence of malicious behavior.

Install this only if you want this specific Chinese AI/LLM weekly-report skill and local KnowledgeBase entry behavior. Be aware that typing or discussing "llm" may invoke it unintentionally; a more specific trigger would be safer and less confusing.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger phrase "llm" is extremely broad and likely to match ordinary user requests about large language models, causing this skill to activate unintentionally. In an agent environment, overly generic triggers can hijack unrelated conversations, surface irrelevant content, or preempt more appropriate skills, increasing the chance of unsafe or confusing behavior.

VirusTotal

64/64 vendors flagged this skill as clean.