Xueersi Daily Question Generator

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:22 PM UTC
• Version:
  1.0.1

Overview

This is a simple tutoring prompt that generates daily practice questions and does not request system access or sensitive permissions.

This skill is reasonable to install for practice-question generation. Be aware that generic prompts like "give me a question" may invoke it unexpectedly, treat the Xueersi affiliation as unverified, and avoid sharing unnecessary sensitive student information.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger phrase "give me a question" is overly broad and can match many normal conversational requests that are not intended to invoke this specific skill. This can cause unintended activation, leading to confusing behavior, context hijacking, or interference with other skills or the base assistant.

VirusTotal

66/66 vendors flagged this skill as clean.