一人公司实战指南

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:42 PM UTC
• Version:
  1.0.0

Overview

This is a text-only Chinese business guide for solopreneurs and does not install code, run commands, or access private data by itself.

Safe to install as a guide. Review any advice before using third-party tools, and only enter API keys, payment details, or customer data directly into trusted services you choose to use.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger phrases are broad, natural-language requests such as asking how to start a one-person company or how marketing acquisition works. In a larger assistant environment, these can easily overlap with ordinary user conversation and cause the skill to activate unintentionally, leading to irrelevant guidance, context hijacking, or suppression of a better-matched skill.

VirusTotal

65/65 vendors flagged this skill as clean.