Content Automation

Security checks across malware telemetry and agentic risk

Overview

This appears to be a content marketing and rewriting skill with some consent and copyright caveats, but no evidence of hidden access, persistence, credential use, or destructive behavior.

Install only if you want an agent to help transform and repurpose marketing or media content. Avoid submitting private, proprietary, personal, or copyrighted material unless you have rights to process and redistribute it, and review outputs before posting to any platform.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The trigger phrases are broad generic terms such as '视频脚本', '分发', and '客服回复', which can overlap with ordinary user requests outside the intended workflow. This can cause unintended activation of the skill, leading the agent to process unrelated content, rewrite sensitive material, or steer user interactions into marketing automation flows without clear consent.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The skill explicitly invites users to submit product links, original articles, and video subtitles for rewriting and redistribution, but provides no warning about privacy, copyright, or platform policy risks. In this context, that omission is meaningful because the skill is designed for bulk content transformation and cross-platform republishing, increasing the chance of unauthorized processing of personal, proprietary, or copyrighted material.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal