Academic Formula Converter

• Outcome: Pass
• Latest audit: May 28, 2026, 2:39 AM
• Version:
  1.0.0

Overview

This is a straightforward local Markdown formula converter, with ordinary caution needed for untrusted Markdown image links and generated HTML.

Install only in an environment where you are comfortable using the requested Python packages. Convert Markdown you trust, or review image links and raw HTML first, because local image paths in Markdown can be embedded into the generated Word file and raw HTML may carry into the generated HTML output.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The trigger list includes broad terms like '数学公式', '论文公式', and 'formula converter' that can appear in ordinary conversation, increasing the chance the skill is invoked without a clear user request to run it. This can cause unintended processing of user content and incorrect tool activation, which is a genuine security and safety issue even if the skill itself appears non-malicious.

VirusTotal

63/63 vendors flagged this skill as clean.