游戏自动化-向僵尸开炮

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed game automation skill that controls the mouse and screenshots a named game window, with dependency and transparency caveats but no evidence of hidden exfiltration or destructive behavior.

Install only in a virtual environment, review or pin the Python dependencies, and run it only while the intended game window is open. Expect it to control your mouse, capture the game window to ./cache/shot.png, write local log files, and possibly take a moment to stop in Pro mode after Ctrl+Q.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (11)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill captures the game window and performs automated clicks without any user-facing notice, consent, or runtime confirmation. Even though this appears intended for game automation, silent screen capture and input injection can affect user trust, interfere with other activity if window targeting is wrong, and create abuse potential if repurposed or triggered unexpectedly.

Missing User Warnings

Low
Confidence
90% confidence
Finding
The code writes logs to a timestamped file without informing the user what is being recorded or where it is stored. While the current log messages appear limited, undisclosed logging can still expose gameplay behavior, recognized text, or environment details and creates a transparency and privacy issue.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
These functions capture portions of an application window and persist the images to disk without any notice, consent flow, retention control, or access restriction. Even though the target appears to be a specific game window, screenshots can still contain user identifiers, chat, account data, or other sensitive on-screen information, and saving them to a predictable local path increases the chance of unintended disclosure.

Unpinned Dependencies

Low
Category
Supply Chain
Content
pywin32
rapidocr
onnxruntime
pyautogui
Confidence
96% confidence
Finding
pywin32

Unpinned Dependencies

Low
Category
Supply Chain
Content
pywin32
rapidocr
onnxruntime
pyautogui
loguru
Confidence
95% confidence
Finding
rapidocr

Unpinned Dependencies

Low
Category
Supply Chain
Content
pywin32
rapidocr
onnxruntime
pyautogui
loguru
keyboard
Confidence
95% confidence
Finding
onnxruntime

Unpinned Dependencies

Low
Category
Supply Chain
Content
pywin32
rapidocr
onnxruntime
pyautogui
loguru
keyboard
# pip install paddlepaddle-gpu==3.0.0 -i https://www.paddlepaddle.org.cn/packages/stable/cu118/
Confidence
97% confidence
Finding
pyautogui

Unpinned Dependencies

Low
Category
Supply Chain
Content
rapidocr
onnxruntime
pyautogui
loguru
keyboard
# pip install paddlepaddle-gpu==3.0.0 -i https://www.paddlepaddle.org.cn/packages/stable/cu118/
# paddlepaddle-gpu==3.0.0
Confidence
94% confidence
Finding
loguru

Unpinned Dependencies

Low
Category
Supply Chain
Content
onnxruntime
pyautogui
loguru
keyboard
# pip install paddlepaddle-gpu==3.0.0 -i https://www.paddlepaddle.org.cn/packages/stable/cu118/
# paddlepaddle-gpu==3.0.0
# rapidocr_paddle
Confidence
97% confidence
Finding
keyboard

Known Vulnerable Dependency: pywin32 — 2 advisory(ies): CVE-2021-32559 (Integer overflow in pywin32); CVE-2021-32559 (An integer overflow exists in pywin32 prior to version b301 when adding an acces)

High
Category
Supply Chain
Confidence
91% confidence
Finding
pywin32

Known Vulnerable Dependency: loguru — 2 advisory(ies): CVE-2022-0338 (loguru logs sensitive information); CVE-2022-0338 (Improper Privilege Management in Conda loguru prior to 0.5.3.)

High
Category
Supply Chain
Confidence
80% confidence
Finding
loguru

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal