Book Sum

Security checks across malware telemetry and agentic risk

Overview

This is a simple local book-summary formatter; its main risks are large or copyright-sensitive outputs, not hidden access or data theft.

Use this only with book summaries or notes you have the right to process. Avoid feeding very large inputs or sensitive private notes, because the skill intentionally returns full, unbounded content and may create large downstream outputs.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill explicitly advertises 'extended summaries,' 'complete book summaries,' and 'full narratives' without any warning or limitation around copyrighted-source handling. That creates a real compliance and misuse risk because users may use the skill to obtain or reconstruct substantial copyrighted book content rather than a transformative summary.

Unbounded Output

Medium
Category
Output Handling
Content
}

  /**
   * Extract key ideas from summary (no truncation)
   */
  extractKeyIdeas(summary, count = 3) {
    const sentences = summary.split(/[.!?]+/).filter(s => s.trim().length > 0);
Confidence
87% confidence
Finding
no truncation

Unbounded Output

Medium
Category
Output Handling
Content
}

  /**
   * Build podcast script (no truncation)
   */
  buildScript(book, ideas, config = {}) {
    let script = `# 📖 ${book.title} — Summary Podcast Script\n\n`;
Confidence
93% confidence
Finding
no truncation

Unbounded Output

Medium
Category
Output Handling
Content
}

  /**
   * Generate text summary (no truncation)
   */
  generateTextSummary(book) {
    if (!book.title || !book.author || !book.summary) {
Confidence
85% confidence
Finding
no truncation

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal