Churn Risk Analyzer

• Outcome: Pass
• Latest audit: May 28, 2026, 1:00 PM
• Version:
  1.0.0

Overview

This is a focused churn-analysis skill that uses user-provided customer data and does not show hidden execution, persistence, or data sharing.

Install is reasonable if you are comfortable using the agent for customer-success analysis. Before pasting data, redact unnecessary personal details, billing specifics, support-ticket contents, and regulated information unless your organization has approved that data for this environment. Treat the external AfrexAI links as optional third-party marketing.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The skill explicitly instructs collection and analysis of potentially sensitive customer data such as support tickets, billing history, engagement signals, and account-level behavioral data without any privacy notice, minimization guidance, or handling restrictions. In a business setting this can lead users to paste regulated, confidential, or personally identifiable information into the agent, creating unnecessary exposure and compliance risk.

VirusTotal

62/62 vendors flagged this skill as clean.