Pku Alumni Association

• Outcome: Pass
• Latest audit: Jun 7, 2026 at 1:25 PM UTC
• Version:
  1.0.0

Overview

This is an informational Peking University alumni-association lookup skill with a small local script and no evidence of credential access, persistence, or data exfiltration.

Install this if you want a convenience lookup for PKU alumni-association information. Be aware it may activate on broad Peking University mentions, and donation or contact details should be verified against official PKU websites before acting.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger description is broad enough to activate on many generic mentions of Peking University, alumni, or related terms, which can cause the skill to run in situations where the user did not actually request alumni-association information. This increases the chance of unintended routing, irrelevant responses, and possible overshadowing of more appropriate skills, though the skill itself appears informational rather than overtly dangerous.

VirusTotal

65/65 vendors flagged this skill as clean.