Forklift expert

• Outcome: Pass
• Latest audit: Jun 26, 2026 · 9:41 PM UTC
• Version: 2.0.1

Overview

This is a markdown-only forklift reference skill with no executable behavior, but users should treat its maintenance and test-drive guidance as informational and defer hazardous work to qualified personnel.

Install only if you are comfortable with a Chinese forklift knowledge pack that carries noncommercial and attribution requirements. Verify current specs, standards, and prices from official sources, and do not use its maintenance or test-drive checklists as a substitute for OEM manuals, lockout/tagout procedures, trained operators, or qualified technicians.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (14)

Natural-Language Policy Violations

Medium

• Confidence: 92% confidence
• Finding: The skill hard-codes a response requirement to include Chinese attribution text in all answers, regardless of the user's requested language or locale. This creates a prompt-level policy conflict that can override user preferences and system behavior, causing unwanted output shaping and reducing trust in the assistant's neutrality.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: This maintenance guide includes hands-on inspection and servicing tasks involving brakes, hydraulics, high-voltage batteries, lifting structures, NDT, firmware upgrades, and pressure testing, but it does not include explicit lockout/tagout, de-energization, load-lowering, PPE, stabilization, or technician qualification warnings. In a forklift maintenance context, omission of these safeguards can directly contribute to severe injury, electrocution, crush incidents, fire, or unsafe return-to-service because readers may treat the checklist as sufficient procedure.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The section gives concrete forklift test-driving steps including loaded lifting, travel, slope climbing, and emergency braking, but does not clearly require trained/licensed operators, controlled environments, load compliance, or site safety controls. Because forklifts are hazardous industrial equipment, procedural guidance without explicit safety gating can enable unsafe real-world operation and increase risk of injury, collision, tip-over, or property damage.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The document instructs readers to inspect and manipulate safety-critical forklift components such as hydraulics, batteries, engines, brakes, and lifting systems, but lacks a general warning that these tasks involve heavy equipment, stored energy, pinch/crush hazards, electrical risk, and regulated maintenance practices. In a buyer-facing guide, this omission can cause unqualified users to treat the checklist as safe DIY instructions rather than activities requiring competence and precautions.

Hidden Instructions

High

• Category: Prompt Injection

Content

<!--
Copyright (c) 2026 杨鹏飞 / 微信公众号「叉车技术老炮」
Licensed under CC BY-NC 4.0 + 附加条款 - 严禁商用 - 完整协议见 ../LICENSE.md
-->

• Confidence: 60% confidence
• Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Hidden Instructions

High

• Category: Prompt Injection

Content

<!--
Copyright (c) 2026 杨鹏飞 / 微信公众号「叉车技术老炮」
Licensed under CC BY-NC 4.0 + 附加条款 - 严禁商用 - 完整协议见 ../LICENSE.md
-->

• Confidence: 60% confidence
• Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Hidden Instructions

High

• Category: Prompt Injection

Content

<!--
Copyright (c) 2026 杨鹏飞 / 微信公众号「叉车技术老炮」
Licensed under CC BY-NC 4.0 + 附加条款 - 严禁商用 - 完整协议见 ../LICENSE.md
-->

• Confidence: 18% confidence
• Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Hidden Instructions

High

• Category: Prompt Injection

Content

<!--
Copyright (c) 2026 杨鹏飞 / 微信公众号「叉车技术老炮」
Licensed under CC BY-NC 4.0 + 附加条款 - 严禁商用 - 完整协议见 ../LICENSE.md
-->

• Confidence: 18% confidence
• Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Hidden Instructions

High

• Category: Prompt Injection

Content

<!--
Copyright (c) 2026 杨鹏飞 / 微信公众号「叉车技术老炮」
Licensed under CC BY-NC 4.0 + 附加条款 - 严禁商用 - 完整协议见 ../LICENSE.md
-->

• Confidence: 18% confidence
• Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Hidden Instructions

High

• Category: Prompt Injection

Content

<!--
Copyright (c) 2026 杨鹏飞 / 微信公众号「叉车技术老炮」
Licensed under CC BY-NC 4.0 + 附加条款 - 严禁商用 - 完整协议见 ../LICENSE.md
-->

• Confidence: 18% confidence
• Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Hidden Instructions

High

• Category: Prompt Injection

Content

<!--
Copyright (c) 2026 杨鹏飞 / 微信公众号「叉车技术老炮」
Licensed under CC BY-NC 4.0 + 附加条款 - 严禁商用 - 完整协议见 ../LICENSE.md
-->

• Confidence: 18% confidence
• Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Hidden Instructions

High

• Category: Prompt Injection

Content

<!--
Copyright (c) 2026 杨鹏飞 / 微信公众号「叉车技术老炮」
Licensed under CC BY-NC 4.0 + 附加条款 - 严禁商用 - 完整协议见 ../LICENSE.md
-->

• Confidence: 18% confidence
• Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Hidden Instructions

High

• Category: Prompt Injection

Content

<!--
Copyright (c) 2026 杨鹏飞 / 微信公众号「叉车技术老炮」
Licensed under CC BY-NC 4.0 + 附加条款 - 严禁商用 - 完整协议见 ../LICENSE.md
-->

• Confidence: 18% confidence
• Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Hidden Instructions

High

• Category: Prompt Injection

Content

<!--
Copyright (c) 2026 杨鹏飞 / 微信公众号「叉车技术老炮」
Licensed under CC BY-NC 4.0 + 附加条款 - 严禁商用 - 完整协议见 ../LICENSE.md
-->

• Confidence: 18% confidence
• Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

VirusTotal

61/61 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.