短视频黄金3秒钩子生成器

Security checks across malware telemetry and agentic risk

Overview

This is a simple Chinese short-video hook-writing skill with no code execution, credentials, persistence, or data access.

Install this if you want a Chinese-language helper for short-video opening hooks. Be aware it may activate on broad words like “hook,” “opening,” or “3 seconds,” and it is designed to answer in a fixed Chinese format.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The trigger conditions include very generic keywords such as “钩子”, “开场”, and “3秒”, which can appear in many unrelated conversations. This can cause unintended skill activation, overriding user intent or injecting irrelevant constrained behavior into sessions that were not asking for this capability.

Natural-Language Policy Violations

Low

Confidence: 78% confidence
Finding: The skill is authored entirely in Chinese and instructs fixed-format Chinese output without checking the user’s preferred language. This can cause unwanted language forcing, reducing usability and potentially leading to misunderstandings when activated for users expecting another locale.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal