Structs Exploration

• Outcome: Pass
• Latest audit: May 29, 2026 at 3:53 PM UTC
• Version:
  1.3.1

Overview

This skill is a clearly scoped Structs gameplay helper with disclosed transaction risks and no hidden executable behavior.

Install this only if you use Structs and trust your local structsd setup. Before signing any transaction, verify player, planet, fleet, and destination IDs; for later planet exploration, confirm currentOre is 0, the fleet is onStation, and you accept any irreversible loss. Avoid using -y unless you intentionally approved the action.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The skill description contains broad trigger phrases such as 'discovering new planets,' 'moving fleet to a new location,' 'expanding territory,' and 'checking fleet status,' which are generic enough to match many ordinary user requests. This increases the chance of unintended invocation of a skill that can perform destructive blockchain transactions, including a Tier 2 action that irreversibly destroys the old planet and scatters assets.

VirusTotal

65/65 vendors flagged this skill as clean.