trump news

Security checks across malware telemetry and agentic risk

Overview

This skill is a public-news briefing helper that asks the agent to browse Trump-related news and summarize it in Chinese, with no code execution, credentials, persistence, or private data access.

Install this if you want Chinese-language Trump news briefings from public sources. Verify politically sensitive or breaking claims against the cited sources, and avoid using it when you need responses in another language unless you explicitly adjust the instruction.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The skill hard-requires Chinese-only output without checking the user's preferred language or obtaining consent. This can override user intent and create policy/compliance issues in multilingual contexts, especially if the surrounding system expects answers in the user's language or needs accessibility accommodations.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal