邮件草稿生成器

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:16 PM UTC
• Version:
  1.0.0

Overview

This is a simple email-drafting skill that may save local drafts/templates, with no code, network access, credentials, or hidden execution found.

Before installing, consider whether you are comfortable with email drafts and templates being saved locally as drafts.json and templates.json. Avoid saving passwords, secrets, or highly confidential email content unless local persistence is acceptable in your environment.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger phrases are generic everyday language like '写邮件' and '生成邮件', which can easily overlap with normal user requests and cause the skill to activate unintentionally. Because this skill can persist drafts and templates, accidental invocation may lead to unwanted handling or storage of user-provided email content.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill declares persistent storage of drafts.json and templates.json but does not inform users that potentially sensitive email content will be saved locally. Email drafts often contain personal, business, or confidential information, so silent persistence increases privacy and data exposure risk if the host environment is shared or compromised.

VirusTotal

64/64 vendors flagged this skill as clean.