Waimai

Security checks across malware telemetry and agentic risk

Overview

This is a simple food-delivery recommendation skill with no executable code, login use, storage, or hidden high-impact behavior.

Install only if you are comfortable with a conversational takeout helper being triggered by broad food-related phrases. It should not need your delivery account login or private credentials; provide only the location, preferences, and budget details you want used for recommendations.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The trigger phrases are very broad everyday expressions such as '吃什么' and '今天吃什么', which can cause the skill to activate in situations where the user did not explicitly intend to invoke a food recommendation workflow. In an agent environment, this raises the risk of accidental routing, unwanted interception of general conversation, and user confusion about why this skill was selected.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal