Xu Jiayin Perspective V2

Security checks across malware telemetry and agentic risk

Overview

This is a text-only business persona skill with repeated risk warnings and no code, persistence, credential access, or data movement.

Install this only if you intentionally want a Xu Jiayin/Evergrande-style cautionary lens for business analysis. Avoid relying on it for real financial, legal, debt, or corporate decisions, and consider narrowing the generic trigger phrases so normal discussions of leverage, scale, or diversification do not activate the persona unexpectedly.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The trigger list includes broad business terms such as “规模至上”, “高杠杆”, and “多元化”, which can appear in ordinary strategy or finance conversations unrelated to this persona. That can cause accidental activation of the skill, injecting a high-risk roleplay frame centered on aggressive expansion and leverage into general business advice, even though the file includes warnings and reflective framing.

Vague Triggers

Low

Confidence: 84% confidence
Finding: The file provides trigger phrases but does not define strict activation boundaries, priority rules, or disambiguation logic for when the skill should remain inactive. In practice, this ambiguity can lead to unintended persona activation and inconsistent behavior, though the presence of repeated cautionary language reduces the severity compared with a skill that actively promotes harmful conduct.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal