Journal Club Presenter

• Outcome: Pass
• Latest audit: May 29, 2026, 8:29 PM
• Version:
  1.0.0

Overview

This is a local journal-club outline generator with disclosed file output and no evidence of hidden network, credential, persistence, or destructive behavior.

Safe to install for creating local journal-club slide outlines. Use an output path inside your workspace and avoid naming important existing files, because the script can overwrite the user-supplied output file. Review the generated academic content for accuracy before presenting it.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 70% confidence
• Finding: Without declared permissions the skill's intent is opaque and cannot be validated.

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The 'When to Use' section expands activation from the specific journal-club presenter purpose to general 'academic writing tasks,' which is much broader and overlaps with many unrelated requests. The file does not provide exclusion examples or clear boundaries for which academic-writing tasks are in scope versus out of scope.

VirusTotal

65/65 vendors flagged this skill as clean.