AI Automation Workflow

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:15 PM UTC
• Version:
  1.0.0

Overview

This is a simple planning guide for business automation workflows and does not include code, credential access, or hidden background behavior.

This skill is safe to use as a planning aid. Be aware it may activate for broad automation or workflow requests, and review permissions carefully before implementing any suggested n8n, Zapier, CRM, email, or social-media automation on live business data.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 94% confidence
• Finding: The trigger list is broad and includes generic terms like "自動化", "workflow", and "AI agent", which can cause the skill to activate for many unrelated requests. In an agent environment, unintended activation can route users into the wrong skill, causing irrelevant guidance, confusion, or unsafe downstream automation suggestions in contexts the user did not intend.

VirusTotal

64/64 vendors flagged this skill as clean.