唯品会返利管家

• Outcome: Pass
• Latest audit: May 29, 2026, 8:31 PM
• Version:
  0.1.0

Overview

This is a simple instruction-only Vipshop rebate and coupon helper with no executable code or hidden install behavior.

Safe to install as an instruction-only helper. Share only the Vipshop order, coupon, rebate, or balance details needed for the task, and do not provide passwords, cookies, session tokens, or payment credentials unless a future version clearly documents an official authorization and data-handling flow.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger list includes broad and ambiguous activation phrases such as general brand/product management terms, which can cause the skill to be invoked in conversations where the user did not clearly intend to use it. This can lead to unexpected handling of shopping-related queries and accidental exposure of order, rebate, or coupon-management functionality in the wrong context.

VirusTotal

63/63 vendors flagged this skill as clean.