Daily Recommend

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:28 PM UTC
• Version:
  1.0.0

Overview

This skill is a disclosed daily recommendation helper, with the main privacy consideration being its local preference history file.

Install this if you want proactive daily recommendations and are comfortable with a workspace file retaining likes, dislikes, ignored items, and preference weights. Review or delete that file if you do not want the history reused.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The skill explicitly records user reactions into a persistent preference file, but the skill text does not indicate any user notice, consent flow, retention limit, or access control for that behavioral data. Even though the stored data appears limited to recommendation preferences, it can still reveal tastes, moods, and inferred personal traits over time, making this a real privacy vulnerability in the context of repeated automated pushes.

VirusTotal

64/64 vendors flagged this skill as clean.