Nm Pensive Code Refinement

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:39 PM UTC
• Version:
  1.0.2

Overview

This skill is a disclosed code-refinement helper that scans project source code for quality issues and does not show hidden, destructive, or data-exfiltrating behavior.

Install this only if you want an agent to inspect source code in the active project and possibly produce reports with code snippets. Review optional Night Market/Claude Code plugin integrations separately before enabling them, and keep generated reports private when working with proprietary code.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: This manifest-style markdown front matter defines triggers such as "refactoring," "algorithms," "craft," and "anti-slop" without clear scope constraints or exclusion conditions. Several of these are generic terms that could match common discussion about code or quality, increasing the chance of unintended invocation.

VirusTotal

66/66 vendors flagged this skill as clean.