Product Review Panel Skill

• Outcome: Pass
• Latest audit: Jun 8, 2026 at 5:42 AM UTC
• Version:
  1.0.0

Overview

This is a text-only PRD review skill with disclosed language-based expert panels and no hidden execution, persistence, or credential access.

Install this if you want a structured, opinionated PRD review panel. Be aware that Chinese conversations automatically use the China-oriented panel; if that is not the perspective you want, explicitly ask for the international panel or a different review frame. Avoid sharing sensitive PRDs or private document links unless you are comfortable with the runtime reading them for the review.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Medium

• Confidence: 93% confidence
• Finding: The file explicitly states that Chinese conversations automatically load a China-specific expert panel, which binds behavior to language rather than the user's stated preference or consent. This can cause identity, cultural, or viewpoint steering and may produce inconsistent or biased outputs for multilingual users who use Chinese but do not want region-specific personas or frameworks.

VirusTotal

64/64 vendors flagged this skill as clean.