Story Short Analyze

• Outcome: Pass
• Latest audit: Jun 14, 2026 at 1:34 AM UTC
• Version:
  1.1.5

Overview

This skill is a disclosed short-fiction analysis workflow that writes local reports and metadata from user-provided story text.

Install this if you want a structured local pipeline for analyzing short fiction. Be aware it will copy the story text into a local `拆文库/{书名}/原文/` folder and write analysis files; only provide story files you have the right to use, and use an explicit command if you want to avoid accidental activation from broad analysis phrases.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The skill defines multiple natural-language trigger phrases such as ‘拆短篇’, ‘短篇拆文’, and ‘分析这篇短篇’, which are broad enough to match ordinary user requests outside a tightly scoped command invocation. This can cause unintended activation of the skill, leading it to process content or enter a file-writing pipeline when the user did not explicitly intend to invoke this specific capability.

VirusTotal

64/64 vendors flagged this skill as clean.