Market Analysis Cn Jarvis

• Outcome: Pass
• Latest audit: May 29, 2026, 8:32 PM
• Version:
  1.0.1

Overview

The skill appears to be a market-analysis service with no evidence of hidden, destructive, or deceptive behavior, though its broad trigger terms could activate it unintentionally.

Install only if you intend to use this market-analysis service. Watch for API-key or paid-quota requirements, and confirm before running analyses that may consume credits.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The trigger list includes broad generic phrases such as “市场分析”, “竞品分析”, “market analysis”, and “趋势”, which are likely to appear in ordinary conversation and can cause the skill to activate when the user did not explicitly request this specific service. In a paid service skill, unintended activation is more risky because it may redirect the conversation, create confusion, or nudge users into a commercial flow they did not intend to enter.

VirusTotal

64/64 vendors flagged this skill as clean.