Back to skill

Security audit

美业沙龙与大健康转化实战手册

Security checks across malware telemetry and agentic risk

Overview

This is a text-only Chinese salon marketing playbook with broad triggers and health-adjacent sales content, but it does not install code, access data, or perform actions on the user's system.

Install this only if you want Chinese-language beauty salon, wellness, and direct-sales marketing assistance. Because the skill can promote health-adjacent products and may activate on broad terms, review generated copy before public use for accuracy, advertising compliance, medical or wellness claims, and whether the user actually asked for sales-conversion guidance.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger list contains broad, generic business and wellness terms that are likely to appear in ordinary Chinese conversation, increasing the chance of unintended skill activation. In this skill, accidental activation is more concerning because the content steers users into sales, health-product promotion, and direct-selling workflows, so a false trigger can unexpectedly inject persuasive or quasi-medical guidance into unrelated chats.

Overly Broad Trigger

Low
Category
Trigger Abuse
Confidence
87% confidence
Finding
Using the short trigger '引流' is overly broad and may activate on generic marketing discussions unrelated to this specific skill. Because the skill contains sales-conversion playbooks and health-product promotion, unintended activation could expose users to unsolicited commercial guidance in the wrong context.

Overly Broad Trigger

Low
Category
Trigger Abuse
Confidence
84% confidence
Finding
The trigger '康婷' is a short brand term that may appear in ordinary brand, product, or news discussions, causing accidental invocation. In context, activation routes the user into direct-selling and monetization guidance, so misfires can produce unsolicited persuasive business content.

Overly Broad Trigger

Low
Category
Trigger Abuse
Confidence
89% confidence
Finding
The trigger '抗糖' is a common wellness term and is likely to occur in many unrelated health or diet conversations. Since this skill couples wellness discussion with product and direct-sales conversion paths, false activation can shift a general health discussion into commercial recommendations without clear user intent.

Overly Broad Trigger

Low
Category
Trigger Abuse
Confidence
89% confidence
Finding
The trigger '抗衰' is a highly common beauty term that can match many ordinary skincare discussions. In this skill, that matters because activation can lead to aggressive conversion workflows, product recommendations, and quasi-health claims, making accidental invocation more risky than in a purely informational beauty glossary.

Overly Broad Trigger

Low
Category
Trigger Abuse
Confidence
86% confidence
Finding
The trigger '茶道' is a broad cultural term that could appear in casual conversation, education, or event planning unrelated to this skill. Because the skill uses tea-themed salons as a funnel into health and direct-selling conversion, an unintended match could redirect benign discussion into commercial persuasion.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.