Component Testing

• Outcome: Pass
• Latest audit: Jun 6, 2026 at 10:57 AM UTC
• Version:
  2.5.0

Overview

This is a straightforward frontend component-testing guide with no executable code or hidden high-impact behavior.

Reasonable to install for frontend component testing. Be aware the detailed instructions are primarily in Chinese, and review any generated tests as normal code changes before committing.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Medium

• Confidence: 92% confidence
• Finding: The skill content from the title through all instructions is written in Chinese, while the metadata description is in English and does not state that the skill is intentionally Chinese-only or provide any opt-in language choice. This can violate language/locale policy because it effectively constrains outputs and guidance to a specific language without documented user consent or justification.

VirusTotal

63/63 vendors flagged this skill as clean.