Volcengine Knowledge Search

• Outcome: Pass
• Latest audit: Jun 11, 2026 at 1:43 PM UTC
• Version:
  1.0.0

Overview

The skill appears to be a disclosed API helper whose network, environment-variable, shell, and temporary-file behavior fits its stated purpose.

Install only if you are comfortable giving the skill its API key and allowing it to send your queries to the external service and write temporary local output. Prefer a dedicated API key, review generated temp files, and avoid using sensitive inputs unless you trust the service endpoint.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 91% confidence
• Finding: The skill invokes a Python script and explicitly documents capabilities such as network access, local file writing, shell execution, environment-variable use, and reading saved temp files, yet the manifest declares no permissions. This creates a trust and policy gap: a host may treat the skill as low-privilege while it can still reach external services and persist data locally, increasing the risk of unintended exfiltration, unsafe file handling, or bypass of operator review.

VirusTotal

65/65 vendors flagged this skill as clean.