Idea Darwin 中文版

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:36 PM UTC
• Version:
  1.0.0

Overview

This is a disclosed idea-iteration skill that reads and writes local project idea files for its stated purpose, with no executable code, network access, or credential use.

Install this if you want an agent-managed local idea workflow. Use it in a dedicated project folder, review generated cards and reports before relying on them, and be aware that broad idea-ranking or idea-iteration requests may cause the skill to read and update local idea project files.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

High

• Confidence: 94% confidence
• Finding: The skill explicitly instructs automatic triggering for any task involving structured ideas, scoring, ranking, or iterative brainstorming, which is broader than a narrowly scoped command trigger. This can cause inappropriate activation on ordinary brainstorming or note-organization tasks, leading the agent to override user intent, apply unnecessary file operations, and expose unrelated workspace content to the skill’s workflow.

VirusTotal

66/66 vendors flagged this skill as clean.