API文档生成器

• Outcome: Pass
• Latest audit: Jun 17, 2026 at 4:16 AM UTC
• Version:
  2.0.0

Overview

This is a documentation-generation skill with no executable installer or hidden data-access behavior found.

Safe to install for API documentation generation. Review generated SDK, curl, mock-server, and test code before running it against real services, especially if it includes write/delete endpoints or real API tokens.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Medium

• Confidence: 91% confidence
• Finding: The skill hard-codes '中文文档' as the output language without indicating that the user's language preference should take priority. This is not a classic security bug, but it is a genuine policy/quality concern because it can override user intent and create misleading or inaccessible outputs in multilingual workflows.

VirusTotal

65/65 vendors flagged this skill as clean.