Vague Triggers
Medium
- Confidence
- 87% confidence
- Finding
- 自动激活条件覆盖“编写新代码”“审查或重构现有代码”“复杂决策”“检查代码质量或审查”等常见开发场景，几乎会在大量普通对话中触发。这会让技能在未被明确请求时介入工作流，增加提示注入、行为偏移或与其他技能冲突的概率，尤其在多技能环境中更容易造成非预期控制。
Karpathy Guidelines
Security checks across malware telemetry and agentic risk
Overview
This is an instruction-only coding-guidelines skill, with no executable code or hidden access, though it may influence many coding tasks and suggests an optional local notes update.
Install this if you want general coding and review discipline applied across development tasks. Before using it, decide whether your agent may invoke a self-improvement workflow or write to references/learnings.md, especially if you want clean commits with no extra documentation changes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)
VirusTotal
66/66 vendors flagged this skill as clean.