Cedh Advisor

Security checks across malware telemetry and agentic risk

Overview

This is a game-advice skill for cEDH, with disclosed but non-automatic references to web checks, local reference files, and future banlist updates.

Safe to install for cEDH assistance. Before relying on gameplay answers, verify current banlist details against an official source, and only allow edits to the skill, knowledge graph, or referenced local scripts after reviewing them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The activation condition is broad enough to trigger on many general MTG-related questions, which can cause the skill to activate outside its intended cEDH-specific scope. Over-broad invocation increases the chance of irrelevant guidance, unintended tool/data access, or the model applying these rigid instructions in the wrong context.

Natural-Language Policy Violations

Medium
Confidence
80% confidence
Finding
The skill description and content are written to enforce German interaction without checking the user's preferred language. This can mis-handle user requests, reduce clarity in time-sensitive gameplay advice, and create consent/usability issues when the surrounding system or user expects another language.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal