Miaoji Scene Studio

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:44 PM UTC
• Version:
  1.4.0

Overview

This skill is a focused helper for writing ecommerce product scene-image prompts and does not show hidden access, persistence, or account-changing behavior.

Reasonable to install for prompt-generation use. Review the optional Python script before running local code, and check that generated commercial visuals comply with platform rules, ad disclosure requirements, and brand accuracy expectations.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The quick-start trigger phrase is very broad and matches ordinary user language such as asking for prompt generation, which can cause the skill to activate unintentionally in unrelated conversations. In an agent environment, overly generic invocation patterns increase the risk of prompt hijacking, accidental routing, or the skill handling inputs outside its intended scope without explicit user consent.

VirusTotal

62/62 vendors flagged this skill as clean.