TopCashback返利助手

• Outcome: Pass
• Latest audit: May 29, 2026, 8:31 PM
• Version:
  0.1.0

Overview

This is a simple TopCashback shopping helper with no code or permissions, though its promotional claims and broad trigger phrases should be verified by users.

Install this only if you want a TopCashback-oriented shopping assistant. Before using any generated cashback link or offer, verify the merchant, rate, availability, and any 'highest cashback' claim against TopCashback or another trusted source.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 85% confidence
• Finding: The trigger list contains broad phrases such as '高返利海外' and '英国返利' that are not tightly scoped to this specific skill. Overly generic triggers can cause unintended invocation, routing user requests to the wrong skill, which may mislead users, suppress safer alternatives, or cause unrequested affiliate-style redirection behavior in shopping contexts.

VirusTotal

65/65 vendors flagged this skill as clean.