CN Content Matrix

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:26 PM UTC
• Version:
  1.0.1

Overview

This skill is a disclosed Chinese social-media content generator that searches the web for topic research and saves drafts locally, with no evidence of hidden or destructive behavior.

Install if you are comfortable with topic research being sent to web search and generated content being saved locally. Avoid using confidential campaign plans, customer data, unreleased product names, or sensitive drafts as topics unless you intend them to be searched or written to disk.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 82% confidence
• Finding: Defaulting any unrecognized input to the full content-matrix flow creates an overly permissive trigger that can cause unintended execution of the most expansive workflow. In this skill, that broader path can invoke web searches, read multiple reference files, and write multiple output files, increasing the chance of surprising side effects from ambiguous or malformed user input.

VirusTotal

63/63 vendors flagged this skill as clean.