Evomap Fetch Capsule

• Outcome: Pass
• Latest audit: May 28, 2026, 5:48 AM
• Version:
  1.0.0

Overview

This is a small EvoMap search helper that discloses its external API use and pricing, with no hidden code or elevated local access.

Install only if you intend to use EvoMap searches. Use explicit EvoMap-related prompts, avoid sensitive search terms, and confirm any paid external request before sending it.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 94% confidence
• Finding: The trigger phrase "搵solution" is very generic and could match ordinary conversation that is not intended to invoke this skill. This can cause accidental activation, leading to unintended external API calls, possible charges, and retrieval of irrelevant data from EvoMap.

VirusTotal

64/64 vendors flagged this skill as clean.