China API Doc Generator

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-writing skill with no executable code, network behavior, persistence, or hidden data access; its main caveat is that it strongly defaults to Chinese documentation conventions.

Safe to install for generating Chinese-market API documentation. Users should explicitly request a different language, timezone, or documentation style when they do not want the China-focused defaults.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Medium

Confidence: 97% confidence
Finding: The skill explicitly mandates a specific locale and language behavior (e.g., always using Chinese conventions and Beijing time) without indicating that the agent should first confirm the user's preferred language or regional format. This can override user intent, reduce usability for non-Chinese users, and cause the agent to respond in an unexpected language or format.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal