Reformed Books Search & Download

• Outcome: Pass
• Latest audit: May 28, 2026, 12:23 PM
• Version:
  1.0.0

Overview

This skill is a straightforward helper for searching a specific external theology book site, with the main caution that it uses plain HTTP and may lead to unverified downloads.

Install only if you want an agent to help search this specific external book site. Because the site and downloads use plain HTTP, verify that any downloaded document is legitimate and legal for you to access, and scan files before opening them.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 90% confidence
• Finding: The skill promises search and download functionality, but the content mainly provides manual browser instructions and does not clearly implement or constrain actual retrieval behavior. This mismatch is dangerous because users and orchestrators may trust the declared purpose while the skill can instead drive browsing to arbitrary external endpoints or fail in ways that obscure what actions are really being taken.

VirusTotal

64/64 vendors flagged this skill as clean.