Raindrop Io

• Outcome: Pass
• Latest audit: May 28, 2026 at 10:49 AM UTC
• Version:
  1.0.0

Overview

This is an unfinished Raindrop.io skill template with no executable code or sensitive access behavior.

Install only if you are comfortable with a placeholder that likely will not help manage Raindrop.io bookmarks yet. Do not provide Raindrop.io tokens or expect account actions until a completed version clearly documents its workflow and access requirements.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 97% confidence
• Finding: The skill metadata and body are still template placeholders and do not specify what the skill does, when it should be invoked, or what inputs/tasks it is intended to handle. In an agent system, ambiguous activation guidance can cause the wrong skill to be selected for unrelated tasks, increasing the chance of unsafe actions, misuse of future scripts/resources, or bypass of expected task boundaries.

VirusTotal

65/65 vendors flagged this skill as clean.