01 Tomato Ip Parse

• Outcome: Review
• Latest audit: May 29, 2026 at 9:32 PM UTC
• Version:
  1.0.5

Overview

The skill mostly does the advertised novel analysis, but it sends full manuscript text to a configured model API and falsely returns a passing compliance check without actually checking content.

Review before installing. Use this only with an API_BASE provider you trust for manuscript content, and do not rely on the compliance_check output because the current code always marks content safe instead of performing a real compliance review.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The skill sends raw user-provided novel content and title to an external API endpoint built from environment configuration, with no disclosure, consent check, minimization, or destination validation. This creates a real data-exposure risk because users may submit unpublished or sensitive text, and the code provides no transparency or safeguards before transmitting it off-platform.

VirusTotal

66/66 vendors flagged this skill as clean.