网红城市

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:27 PM UTC
• Version:
  0.1.0

Overview

This appears to be a low-risk travel recommendation skill with a somewhat broad trigger phrase, not a harmful or high-impact capability.

Install this as a convenience skill for city or travel recommendations, but expect occasional over-triggering on general travel prompts. Ask your agent to confirm the scope if you only want ordinary lodging, transportation, booking, or unrelated city information.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 82% confidence
• Finding: The skill description says it should be called when users 'search internet-famous cities or plan related travel,' which is broad and ambiguous. This can cause over-invocation in loosely related travel queries, leading the agent to select this skill in inappropriate contexts and return lower-quality or mismatched guidance.

VirusTotal

66/66 vendors flagged this skill as clean.