胡田-OPC导师-招商引流

• Outcome: Pass
• Latest audit: Jun 9, 2026 at 5:07 PM UTC
• Version:
  1.0.0

Overview

The available evidence shows a purpose-aligned business outreach skill with no malware detections or concrete signs of hidden, destructive, or data-exfiltrating behavior.

Install only if you want an assistant to help with investment attraction, project matching, or exposure-building workflows. Be aware it may activate on broadly related business-development requests, so confirm the intended task before relying on its recommendations or outreach language.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The trigger conditions are broad, generic user intents such as needing investment attraction, project matching, or improving exposure, which can overlap with many normal conversations. This increases the chance of accidental invocation, causing the agent to enter a specialized persuasion/outreach workflow when the user did not explicitly request it.

VirusTotal

64/64 vendors flagged this skill as clean.