Drunk Mode

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed persona toggle that only changes response style and stores a small local on/off state, with a risk of accidental activation from broad Chinese trigger phrases.

Install only if you want a persistent persona mode. Be aware that casual phrases meaning 'drunk' or 'dizzy' may turn it on unexpectedly; use '关闭醉酒模式' or edit/remove drunk_state.json if the style appears when you did not intend it.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 93% confidence
Finding: The trigger phrases include common conversational terms like “醉了” and “有点晕,” which can appear in ordinary chat unrelated to enabling a persona. This creates a real prompt-scope vulnerability because the skill may activate unexpectedly and alter subsequent behavior without clear user intent, reducing reliability and potentially interfering with safety-critical responses.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal