jav-lookup

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only adult-content lookup helper that is transparent about querying JAV sites and only asks for magnet-link lookup when the user requests it.

Install only if you intentionally want a JAV/adult-video lookup helper. Be aware it may query third-party adult sites and, if you ask for magnet links, may surface download links whose legality, safety, and availability you must evaluate yourself. Consider narrowing activation to explicit JAV codes or JAV-specific wording to avoid accidental use.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The trigger phrases are broad enough to cause the skill to activate on generic requests such as looking up film information or mentioning magnet links, even when the user did not specifically intend to invoke this capability. In this context, unintended invocation is more dangerous because the skill is designed to retrieve pornographic metadata and torrent/magnet links, which can lead to policy, privacy, or compliance issues if activated spuriously.

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal