Yuc's Anime List

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:16 PM UTC
• Version:
  0.0.4

Overview

This is a scoped scraper for public yuc.wiki anime lineup pages, with no evidence of hidden credential access, persistence, or unrelated behavior.

Install if you are comfortable with the agent contacting public pages on yuc.wiki and optionally writing scraped JSON where you direct it. Review results before relying on them because website layout changes could affect parsing accuracy.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 87% confidence
• Finding: The skill explicitly performs network access to scrape yuc.wiki and also mentions generating outputs, while no permissions are declared. Even if the current intent is benign, missing permission declarations weakens transparency and policy enforcement: users and the host may not realize the skill can reach external sites or write files/artifacts, which increases the chance of unexpected data access or persistence if the skill is modified or misused.

VirusTotal

66/66 vendors flagged this skill as clean.