软考论文生成 | Ruankao Essay Generator

Security checks across malware telemetry and agentic risk

Overview

This skill is technically low-risk but encourages believable exam essays with invented project experience that could mislead evaluators.

Install only if you intend to use it for study, outlining, or clearly hypothetical practice. Before using any output in a real assessment, replace invented project details with truthful experience and avoid submitting fictional roles, employers, timelines, scale, or results as your own.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The skill explicitly directs the model to invent a 'reasonable' project background when the user does not supply one, including industry, team size, user scale, timeline, and launch date, but provides no disclosure that these details are fictional. In this context, the generated essay is meant to appear realistic and high-scoring, so fabricated facts can easily be mistaken for the user's real experience, enabling deceptive submissions or misrepresentation.

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: Fixing the author's role to '系统架构设计师' regardless of the user's actual background encourages generation of first-person content that may falsely claim credentials, responsibilities, or experience the user does not have. Because this skill is specifically designed for exam-style essay production, the instruction increases the risk of impersonation-like misrepresentation rather than harmless formatting.

Ssd 4

Medium

Confidence: 95% confidence
Finding: The template explicitly instructs the user to make the evaluator believe they personally completed a project and provides a structure for inventing concrete employer, system, scale, role, and results details. This facilitates deceptive impersonation of professional experience and can be used for academic/professional fraud, especially because the skill context is exam essay generation where authenticity is material to evaluation.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal