Qjzd Nav Cli Content

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:40 PM UTC
• Version:
  1.3.2

Overview

This instruction-only skill is a coherent helper for QJZD Nav CLI content management, with real delete and reorder commands that users should run carefully.

Install this only if you use and trust qjzd-nav for the QJZD Nav account it will control. Before running delete, update, or reorder examples, list the affected links/categories/tags first, confirm IDs, and understand that changes may alter or remove live content.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill documents direct delete operations for links without any confirmation, rollback guidance, or warning about permanence. In a terminal-focused content-management skill, this increases the chance of accidental destructive actions or unsafe automation, especially if an agent follows examples literally.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The category deletion examples omit clear warnings that deletion can affect related data, including moving links to a parent/default location or otherwise changing content organization. Because this skill is specifically for managing links, categories, and tags from the CLI, an operator or agent could cause unintended large-scale data changes by executing the example without understanding the side effects.

VirusTotal

66/66 vendors flagged this skill as clean.