Poster Layout Planner

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:32 PM UTC
• Version:
  1.0.0

Overview

This is a low-risk academic poster layout helper, though its description is broader than its actual poster-only capability.

Install only if you want a basic academic poster layout helper. Treat it as poster-specific despite the generic wording, and prefer that the publisher narrow the description and activation rules before relying on automatic skill selection.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The top-level description encourages use for broadly defined workflows needing structure, assumptions, and output boundaries rather than for poster layout specifically. In an agent ecosystem, this can make the skill eligible for many unrelated prompts, increasing the chance of inappropriate execution, confused-deputy behavior, or misuse of any packaged script against inputs it was not designed to handle.

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The 'When to Use' criteria are so broad that they could match many unrelated tasks, especially any request asking for bounded scope or explicit assumptions. This makes automatic or human selection of the skill unreliable and increases the risk that downstream script execution or workflow steps are applied in contexts with different safety requirements.

VirusTotal

66/66 vendors flagged this skill as clean.