social-media-manager

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:17 PM UTC
• Version:
  1.0.0

Overview

This is a coherent social media planning skill with a local calendar helper and no evidence of hidden account access, networking, persistence, or destructive behavior.

Reasonable to install for social media strategy and calendar planning. Keep marketing-context.md limited to brand and audience guidance you intend the skill to use, and run the Python calendar helper only with config files you chose.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 87% confidence
• Finding: The invocation text is broad enough to trigger on common marketing conversations such as generic platform selection, follower growth, or social planning, which can cause the agent to invoke this skill outside its narrow intended use. This is not a code-execution or data-exfiltration issue, but it can lead to misrouting, reduced reliability, and unintended handling of user requests that should go to other skills.

VirusTotal

66/66 vendors flagged this skill as clean.