横纵分析法

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:42 PM UTC
• Version:
  1.1.0

Overview

This is a markdown-only research prompt framework, with no code execution, credential access, persistence, or hidden data handling.

Install this if you want a reusable framework for deep or quick research reports. Be aware it may activate on broad research prompts, and avoid putting confidential material into the research target if the workflow sends the filled prompt to an external AI service.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The skill description includes broad trigger phrases such as 'research framework', 'deep analysis report', and '快速了解某个领域', which are generic enough to match many unrelated user requests. This can cause the agent to invoke the skill in contexts where it is not the best fit, leading to prompt hijacking of workflow selection, irrelevant behavior, or reduced reliability of downstream analysis.

VirusTotal

65/65 vendors flagged this skill as clean.