editor-classify-and-parse

• Outcome: Pass
• Latest audit: Jun 4, 2026 at 10:11 AM UTC
• Version:
  1.0.0

Overview

This skill only guides an agent to classify and summarize script text, with no code execution, persistence, network use, or credential access.

Safe to install for Chinese-language script classification workflows. Users working in other languages should verify outputs carefully or add language-handling guidance, but the skill itself does not ask the agent to modify files, run commands, store data, or contact external services.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Medium

• Confidence: 92% confidence
• Finding: The skill is written entirely in Chinese and does not provide any language negotiation, fallback behavior, or a documented reason for restricting interaction to Chinese. This can cause the agent to ignore or mishandle user input in other languages, leading to incorrect classification/parsing results and unreliable downstream workflow decisions.

VirusTotal

61/61 vendors flagged this skill as clean.