Fictional Companion Forge

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:28 PM UTC
• Version:
  1.0.0

Overview

This prompt-only skill creates fictional-character companion profiles and shows no hidden code, credential access, or external data use.

Install this if you want help creating fictional-character companion profiles. Review generated companions for unwanted intensity, romance, violence, or canon-inference issues, and avoid using the skill to impersonate real people or present fan-inferred traits as official canon.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The trigger description is very broad and includes generic requests like 'let me talk to this character' or 'generate an agent based on this fictional role,' which could cause the skill to activate for loosely related prompts outside its intended scope. In an agent-routing system, this can lead to misselection, causing the model to produce persona-driven companion outputs when the user may have intended analysis, discussion, or other safer/non-impersonation tasks.

VirusTotal

61/61 vendors flagged this skill as clean.