Ts Interface Miner

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:13 PM UTC
• Version:
  0.1.0

Overview

This is a TypeScript API documentation helper with no executable code, hidden persistence, credential use, or destructive behavior.

Install this only if you want an assistant to inspect TypeScript API code and generate Markdown tables. Avoid using it on proprietary or sensitive repositories unless you are comfortable with relevant API paths, type structures, comments, and snippets appearing in the conversation output.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The skill activates on very broad, common user intents such as '分析 API', '查找接口', or providing a file path plus a generic documentation request. In an agent system, this can cause unintended auto-invocation, pulling the model into processing code and generating structured output in situations where the user did not clearly request this specific skill, increasing prompt-scope confusion and misrouting risk.

VirusTotal

66/66 vendors flagged this skill as clean.