券返双省助手

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only shopping savings helper with no code, install steps, credential use, or account-changing behavior.

Install only if you want coupon and rebate comparison help. Verify coupon sources, rebate terms, expiration dates, and destination links yourself before relying on any recommendation, especially for hidden or affiliate-style offers.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 85% confidence
Finding: The trigger list includes broad everyday phrases such as '省钱叠加', '双重省钱', and generic coupon/rebate terms without clear activation boundaries. In an agent environment, this can cause unintended invocation on unrelated shopping or budgeting conversations, leading the skill to act on user commerce context when it was not explicitly requested.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal