Strykr Qa Bot

• Outcome: Pass
• Latest audit: May 28, 2026, 2:36 AM
• Version:
  0.1.2

Overview

This is a coherent QA testing skill for the Strykr website, with expected browser automation, screenshots, reports, and local test output.

Install only if you intend to run automated tests against Strykr or an authorized test environment. Review or secure generated screenshots, console logs, and reports before sharing them, and pin the web-qa-bot dependency for repeatable CI runs.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

• Confidence: 90% confidence
• Finding: The README explicitly promotes screenshot capture and report generation for QA runs but does not warn users that these artifacts can contain sensitive UI content such as account data, API responses, chat prompts, or other proprietary information visible during testing. In a CI/CD-ready testing skill, this omission increases the chance that screenshots and reports are stored, shared, or retained insecurely by default.

VirusTotal

66/66 vendors flagged this skill as clean.