Publish & Share HTML games

• Outcome: Review
• Latest audit: May 29, 2026 at 9:23 PM UTC
• Version:
  1.0.1

Overview

This skill clearly publishes HTML projects to PaperBox, but its activation is broad enough that an agent could upload/share content without a clear final confirmation.

Install only if you want your agent to publish HTML projects to PaperBox using your API key. Before use, require the agent to ask for explicit confirmation, review the HTML for secrets or private content, and check how PaperBox handles visibility, retention, and deletion.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The trigger phrases are broad enough that the skill could activate on generic requests like 'share this' or 'get a link' without the user clearly intending to publish content to an external third-party service. In this skill, unintended activation is more dangerous because activation leads directly to uploading user-generated HTML to a remote endpoint, potentially causing data disclosure or unauthorized publication.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill instructs the agent to transmit full HTML content to an external service but does not require an explicit warning or consent step informing the user that their project will leave the current system. This is risky because HTML apps may contain embedded secrets, private content, proprietary code, or tracking logic, and the skill frames upload as a normal workflow rather than a user-authorized external disclosure.

VirusTotal

64/64 vendors flagged this skill as clean.