Markdown Table Maker

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:43 PM UTC
• Version:
  1.0.0

Overview

This is a small local Markdown table helper with no evidence of hidden access, networking, persistence, or destructive behavior.

Install only if you want a local Markdown table utility. Check input and output file paths before running the script, since output options write to the path you provide. Be aware that the documentation overstates TSV and merge support in this version.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The description includes a broad trigger phrase in Chinese ('当用户需要创建Markdown表格、格式化表格、对齐列、从数据生成表格时触发') that can cause the skill to activate on a wide range of ordinary requests. Over-broad activation increases the chance of unintended invocation, which can route user data or actions through the skill when the user did not explicitly request it.

VirusTotal

66/66 vendors flagged this skill as clean.