Security audit

TrendRadar

Security checks across malware telemetry and agentic risk

Overview

TrendRadar is a coherent product-trend browsing skill with broad trigger phrases and external site lookups, but no evidence of hidden, destructive, credential-stealing, or exfiltration behavior.

Install only if you want an agent to browse social and trend sites for product discovery. Be aware that broad trend-related phrases may trigger it, and live searches may send query terms or browsing activity to third-party platforms; use explicit product-trend wording when invoking it.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 92% confidence
Finding: The skill’s declared behavior does not fully match the operational behavior described in the file. It expands to additional data sources, broader workflows, and downstream action recommendations while also implying direct scanning even though it primarily orchestrates browser/web_search actions; this reduces transparency and can cause users or calling systems to grant broader trust, permissions, or invocation scope than intended.

Vague Triggers

Medium

Confidence: 86% confidence
Finding: The invocation guidance uses broad, everyday phrases like requests for what is popular or viral, which can cause the skill to trigger in contexts the user did not intend. Over-broad activation increases the chance of unnecessary external browsing, data transmission to third-party sites, and misrouting away from more appropriate skills.

Vague Triggers

Medium

Confidence: 88% confidence
Finding: The trigger phrase block contains ambiguous generic activators such as 'what's hot right now' and 'hot items' without strong scope boundaries. In an agent ecosystem, such triggers can lead to accidental invocation and unintended third-party lookups, especially when queries concern general popularity rather than product intelligence.

Missing User Warnings

Low

Confidence: 80% confidence
Finding: The file says it uses browser navigation to read live platform data directly but does not clearly warn that user queries may be sent to external sites and observed by third parties. This is a transparency and privacy issue: users may not realize that invoking the skill can trigger outbound browsing to social platforms and trend services.

Vague Triggers

High

Confidence: 94% confidence
Finding: The trigger list contains broad, everyday terms such as "trending," "viral," "热门," and "种草" that are likely to match many unrelated user requests. In an agent ecosystem, this can cause unintended invocation, letting the skill intercept traffic outside its narrow purpose and potentially exposing user queries or influencing downstream purchase recommendations without clear user intent.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.