ESG Sustainability Analyzer

• Outcome: Pass
• Latest audit: Jun 12, 2026 at 11:47 AM UTC
• Version:
  1.0.0

Overview

This is a plain ESG analysis guide with no executable code or hidden behavior, though users should be careful with sensitive company data.

Use this skill only with ESG data you are authorized to process. Prefer public filings or redacted documents, avoid unnecessary personal or confidential business data, and independently verify regulatory conclusions because reporting frameworks and climate disclosure rules change over time.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The skill explicitly instructs collection and analysis of company disclosures, uploaded documents, and URLs, which commonly contain confidential business information, employee data, and regulated disclosures. Omitting a clear warning about sensitive data handling increases the chance users will provide proprietary or personal data without understanding privacy, retention, or sharing risks.

VirusTotal

63/63 vendors flagged this skill as clean.