Security audit

element-plus-docs

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only Element Plus reference skill, with one flawed link-sanitizer example users should not copy as-is.

Installers can treat this as a documentation skill, but should avoid copying the Link sanitizer snippet without fixing and testing it. Treat code examples as framework examples, not production security-reviewed code.

SkillSpector

By NVIDIA

Vulnerability Patterns

YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Intent-Code Divergence

Medium

Confidence: 99% confidence
Finding: The document correctly warns that unsanitized href values can cause XSS or open redirect issues, but the provided sanitizer example is broken and may mislead developers into thinking they are protected. It contains inconsistent variable names and an incorrect allowlist format, which can cause the check to fail or be reimplemented incorrectly, increasing the chance that unsafe URLs are passed into <a href> rendering.

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High

Category: YARA Match
Content: ``` ---
Confidence: 98% confidence
Finding: description=; description=; ; ; ; ; ; ; ; ; ; ;

VirusTotal

54/54 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.