Security audit

fore-vip-find-customers

Security checks across malware telemetry and agentic risk

Overview

The skill is a coherent B2B lead-generation assistant, but it can send outreach emails through the user's mailbox without a clearly required final approval step.

Review this skill carefully before installing if your environment has Agent Mail connected. It should be used only when you intend B2B lead generation, and you should require a final manual review before any emails are sent from your mailbox.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The top-level description contains very broad trigger phrases like '帮我找客户', '获客', and '销售线索', which can match many ordinary business-help requests without strong scoping. In an agent environment, this can cause unintended activation and route users into lead-generation and outreach workflows, including email drafting/sending behavior, when they may only want general advice.

Vague Triggers

Medium

Confidence: 95% confidence
Finding: The trigger table uses ambiguous activation rules that map common phrases such as '找客户', '我的货/服务卖给谁', and '潜在客户' directly into the skill workflow without enough boundary checks. Because this skill can proceed to collecting contact info from public sources and preparing direct outreach, overbroad activation increases the risk of inappropriate data gathering, unsolicited outreach preparation, and user surprise.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.