Xianyu Auto Ops

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:34 PM UTC
• Version:
  0.3.0

Overview

This skill is a coherent Xianyu listing helper with a small local CSV normalizer and no evidence of hidden data transfer or persistent privileges.

Reasonable to install for marketplace listing work. When using batch mode, provide only product/SKU CSVs you intend the agent to read, and review generated claims, pricing, warranties, and defect disclosures before posting.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 90% confidence
• Finding: The skill instructs the agent to read local reference files and a normalization script (`references/ai-services-template.md`, `references/playbook.md`, `scripts/batch_csv_to_brief.py <file>`) while the metadata does not declare permissions. This creates an undeclared file-read capability and can lead to unexpected access to local files or user-provided paths, especially when a user supplies a CSV filename.

VirusTotal

64/64 vendors flagged this skill as clean.