Paper Report Delivery

• Outcome: Review
• Latest audit: May 29, 2026, 9:25 PM
• Version:
  1.0.0

Overview

The skill’s paper-report and Telegram delivery workflow is mostly coherent, but it can embed arbitrary local files named in image metadata into HTML that may be sent to Telegram.

Review before installing. Only run this skill on trusted report metadata, inspect generated HTML before sending, and constrain image_path handling to known asset directories and real image MIME types. Use an explicit Telegram target and avoid running it in directories containing sensitive files until that file-embedding behavior is scoped.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 91% confidence
• Finding: The skill instructs use of file reads/writes, shell scripts, environment-backed configuration, and repo integration, but declares no permissions. That mismatch can cause agents or reviewers to underestimate the skill's operational reach, leading to execution with broader capabilities than users expect. In a pipeline that touches local artifacts, delivery scripts, and Telegram transport, undeclared capabilities materially increase the chance of unintended file access, secret use, or shell-side effects.

VirusTotal

63/63 vendors flagged this skill as clean.