Security audit

高校AIGC日报

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed daily public-news digest skill; its web searches, local archive, and optional knowledge-base sync fit that purpose but should be understood before use.

Install only if you are comfortable with daily web lookups, saved digest files, and any configured knowledge-base sync. Confirm where the knowledge base is, who can read it, and whether the daily schedule can be disabled.

SkillSpector

By NVIDIA

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Description-Behavior Mismatch

Medium

Confidence: 90% confidence
Finding: The skill’s stated purpose is to aggregate and output a structured daily digest, but the workflow also persists results to local storage and may synchronize them to an external knowledge base. This expands the data flow beyond what is necessary for the declared function, creating unnecessary retention and potential secondary disclosure if the digest contains sensitive internal prompts, user context, or proprietary summaries.

Context-Inappropriate Capability

Medium

Confidence: 92% confidence
Finding: Synchronizing the digest to a designated knowledge base is not required to perform news aggregation and introduces an unnecessary outbound data channel. Even if the content is mostly public news, automatic syncing can leak derived summaries, internal annotations, or operational metadata into external systems without clear user awareness or consent.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.