E2E自动化工程师 路由与UI冒烟验证

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:44 PM UTC
• Version:
  1.1.0

Overview

This is a small, disclosed helper for route and UI smoke checks, with no executable installer or hidden behavior found.

Install this only if you want an agent to perform scoped route and UI smoke validation. Use it in development or test environments where route refresh commands and HTTP/browser probes are appropriate, and give it a specific route or page target when invoking it.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 84% confidence
• Finding: The skill advertises broad invocation triggers such as smoke, route check, page renders, and HTTP request, which can overlap with ordinary user requests and cause the wrong skill to activate. In an agent system, over-broad routing can unintentionally grant this skill control over tasks involving HTTP probing, route validation, or UI checks, increasing the chance of unintended actions and mis-scoped execution.

VirusTotal

64/64 vendors flagged this skill as clean.