Content Trend Analyzer

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:43 PM UTC
• Version:
  1.0.0

Overview

This is a Markdown-only public trend research helper; its broad trigger terms may cause extra web searches, but no hidden code or privileged access was found.

Installers should understand that this skill may cause the agent to run several public web searches across platforms such as Google Trends, Reddit, YouTube, X, Zhihu, Weibo, GitHub Trending, and Product Hunt. Set a clear topic, platform list, and time range when using it, and do not provide private account access unless you intentionally want to expand beyond the skill's documented public-research scope.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The trigger keywords are broad, generic, and closely overlap with ordinary editorial or research requests such as topic analysis, content strategy, and outline generation. This increases the chance of unintended invocation, causing the skill to activate in situations beyond its intended scope and potentially leading to unnecessary web access, noisy tool use, or routing of user requests into an overly powerful workflow.

VirusTotal

65/65 vendors flagged this skill as clean.