618素材文本提报助手

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill is a disclosed Taobao seller automation helper, but it can automatically submit business campaign materials without a documented review or confirmation step.

Review carefully before installing. Use this only if you are comfortable with an agent submitting Taobao campaign material from an already logged-in seller account, and prefer a version that previews all generated titles and reasons and asks for explicit confirmation before final submission.

SkillSpector (2)

By NVIDIA

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The README explicitly says the skill will automatically fill and submit activity materials on the user's behalf, but it does not document confirmation, preview, or consent safeguards before submission. In a seller-center context, silent or poorly disclosed submission can cause unintended campaign enrollment data, incorrect promotional copy, or compliance issues if the generated content is inaccurate.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly states it will automatically submit filled content, but the description does not mention any user review, confirmation, or dry-run step before taking an irreversible action. In the context of a logged-in Taobao seller workflow, this could cause unintended campaign submissions, incorrect promotional copy, or bulk mistakes across multiple products.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal