anime-calendar

Security checks across malware telemetry and agentic risk

Overview

This skill only guides the agent to look up public anime schedule information and does not request private access, installation code, persistence, or elevated permissions.

Install this if you want web-backed anime schedule lookups. Expect it to query public sites such as Bilibili, Bangumi, or 动漫之家, and verify timing on the original platform when accuracy matters.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 90% confidence
Finding: The trigger description is broad enough to match several common anime-related queries without clearly constraining when the skill should activate versus when a general answer would suffice. Over-broad activation can cause the agent to invoke web-searching behavior unnecessarily, increasing the chance of misrouting, noisy tool use, and exposure to untrusted external content.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal