Nm Memory Palace Session Palace Builder

• Outcome: Pass
• Latest audit: May 28, 2026 at 8:23 AM UTC
• Version:
  1.0.2

Overview

This skill is an instruction-only aid for organizing temporary project context, with no bundled executable code or hidden data movement found.

Install this if you want help structuring multi-turn project context. Avoid putting secrets or highly sensitive personal data into the organized session notes, and explicitly review any export, archive, or transfer into permanent memory before allowing it.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger list includes broad, generic terms like "session," "context," and "conversation-state," which are likely to match many ordinary interactions and cause the skill to activate outside its intended scope. Over-broad auto-invocation increases the attack surface by injecting this skill's behavior into unrelated tasks, potentially interfering with agent behavior or causing unintended state retention in contexts where temporary memory handling was not requested.

VirusTotal

65/65 vendors flagged this skill as clean.