chinese-huangdi-health-timer

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:13 PM UTC
• Version:
  1.0.0

Overview

This is a simple wellness timer skill with static Huangdi meridian-cycle tips and no evidence of code execution, credential access, persistence, or data exfiltration.

Install this only if you want general Huangdi-style wellness reminders. Treat the tips as lifestyle content rather than medical advice, and be aware that the broad "health" trigger could make the skill appear in unrelated health conversations.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The trigger list includes very broad terms such as "health" and common Chinese wellness terms, which can cause the skill to activate for many unrelated user requests. This increases the chance of unintended invocation, user confusion, and accidental routing to a skill that may provide quasi-medical guidance outside the user's intent.

VirusTotal

59/59 vendors flagged this skill as clean.