Qa Ai Context Engineering

• Outcome: Pass
• Latest audit: Jun 20, 2026 at 7:53 PM UTC
• Version:
  1.3.0

Overview

This skill is a QA helper that organizes requirements into testing context, with no executable code or hidden behavior found.

Install this if you want a Chinese-language QA workflow helper for turning requirements, files, or URLs into structured testing context. Be aware that generic requests like asking to analyze a feature may activate it, so provide clear testing intent when using it.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 94% confidence
• Finding: The activation conditions are broad enough to trigger on common requests like '帮我测试' or '分析这个功能', which can cause the skill to activate outside its intended scope. In an agent system, over-broad auto-activation can inappropriately steer workflows, cause unintended file/URL reading, and inject this skill's behavior into unrelated user tasks.

VirusTotal

63/63 vendors flagged this skill as clean.