Citation Formatter

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:19 PM UTC
• Version:
  0.1.0

Overview

This is a local citation-formatting skill with some overbroad and inaccurate capability claims, but no evidence of hidden access, credential handling, persistence, network activity, or harmful behavior.

Install only if you need local citation formatting, especially AMA-style output. Review results manually before journal submission because the skill's documentation overstates its style coverage and validation capabilities.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The summary "Use when working with citation formatter" is overly broad and does not clearly constrain when the skill should activate. Broad activation text can cause the agent to invoke this skill in loosely related contexts, increasing the chance of inappropriate tool use, prompt-surface expansion, or unintended processing of user content. In this context, the skill is low inherent risk because it formats citations rather than performing privileged actions, but ambiguous routing still creates avoidable exposure.

VirusTotal

66/66 vendors flagged this skill as clean.