AI职业规划师

• Outcome: Pass
• Latest audit: Jun 17, 2026 at 11:31 AM UTC
• Version:
  1.0.0

Overview

This is a plain career-coaching skill with no executable code, persistence, credential use, or hidden system-changing behavior.

Safe to install from a security perspective. Users should remember that career coaching may involve sensitive personal, employment, salary, or legal-adjacent details, so share only what is needed and independently verify advice about contracts, taxes, non-competes, or benefits before acting.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The invocation examples are generic, everyday user requests such as resume help and offer comparison, without clear boundaries that distinguish when this specific skill should activate. In agent ecosystems, overly broad triggers can cause unintended routing or invocation, leading the skill to engage on ambiguous prompts and potentially override more appropriate specialized handling.

VirusTotal

56/56 vendors flagged this skill as clean.