Security audit

Xiao Chuang You Emotion

Security checks across malware telemetry and agentic risk

Overview

This is a Chinese-language emotional support prompt skill with no code execution, system access, credentials, or persistence.

Install only if you want a Chinese-language emotional support style skill. Treat it as reflective coping support, not professional mental-health care; for severe distress, diagnosis, treatment, or urgent safety concerns, use qualified professional or emergency support.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The skill description and activation criteria center on very broad mental-health and emotional terms, so ordinary user messages can unintentionally trigger this skill. In a sensitive domain like emotional support, accidental activation can redirect conversations, surface quasi-therapeutic guidance without clear user intent, and interfere with safer or more appropriate system behaviors.

Vague Triggers

Medium

Confidence: 95% confidence
Finding: The trigger list includes highly generic words such as '心情', '压力', and '难受', which appear frequently in routine conversation and are not specific enough to indicate deliberate invocation of this skill. Because the skill provides emotionally charged guidance, over-triggering increases the risk of inappropriate advice, user confusion, and mishandling of conversations that may require clearer safety routing.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.