Ru Pack

• Outcome: Pass
• Latest audit: May 28, 2026 at 11:17 AM UTC
• Version:
  1.0.0

Overview

This is a prompt-only Russian text-processing skill pack with no executable code, network access, credential use, or persistence shown.

This appears safe to install as a text helper. Use explicit prompts when asking for legal, medical, tax, or government-related writing, and treat outputs in those areas as drafting assistance rather than professional advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 84% confidence
• Finding: The instruction that the pack will 'itself determine the needed skill' from broad user phrasing can lead to overbroad activation and unintended invocation. In a bundle handling legal, medical, government, and tax topics, incorrect routing could expose sensitive user data to the wrong sub-skill or trigger advice in a higher-risk domain without explicit user intent.

VirusTotal

66/66 vendors flagged this skill as clean.