How To Creat Opc

• Outcome: Pass
• Latest audit: May 30, 2026, 2:07 PM
• Version:
  1.0.0

Overview

This is a Chinese-language startup guidance skill with no executable code, hidden behavior, or privileged access requests.

Install this if you want Chinese guidance on AI-native startup workflows. Expect broad business-strategy advice and references to Claude products, but the artifact itself does not run code or access your data.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 85% confidence
• Finding: The skill metadata describes very broad activation conditions such as entrepreneurship guidance, AI startup methodology, and one-person company operations. This can cause the skill to be invoked in many generic business-advice contexts where a narrower or more specialized skill would be more appropriate, increasing the chance of unintended routing and irrelevant guidance.

Natural-Language Policy Violations

Medium

• Confidence: 80% confidence
• Finding: The skill description is written as Chinese-only and implies a fixed language behavior, which can conflict with higher-level locale or user-language policies. If invoked for users in other languages, it may produce responses in the wrong language or bypass expected localization behavior, degrading usability and policy compliance.

VirusTotal

64/64 vendors flagged this skill as clean.