Internal Hub Agent Lab

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:17 PM UTC
• Version:
  1.0.0

Overview

This is a disclosed coordination skill for routing reusable work notes into a shared internal hub, with the main caution being broad automatic activation.

Install only if you want agents to use D:\internal-hub as a shared workspace for reusable coordination notes and skills. Because it can be invoked implicitly, keep sensitive or unrelated information out of that hub unless you intentionally want it shared there.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The skill enables implicit invocation without any visible trigger constraints or narrowing conditions, which can cause the agent to activate this skill in situations broader than intended. Because the skill is designed to route information into a shared internal hub, unintended activation could expose internal notes, handoffs, SOPs, or reusable findings into the wrong workflow or context, increasing the risk of oversharing or policy-boundary drift.

VirusTotal

65/65 vendors flagged this skill as clean.