ab-test-setup

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:16 PM UTC
• Version:
  1.0.0

Overview

This is a plain A/B testing guidance skill with no executable code or credential access; its main caveat is broad activation wording.

Safe to install for A/B test planning. Review any `.agents/product-marketing-context.md` or `.claude/product-marketing-context.md` file before use if it contains sensitive business information, and be aware the skill may activate on generic experimentation words where a narrower skill might fit better.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The manifest description says to use the skill when the user wants to "plan, design, or implement an A/B test or experiment" and also when they mention generic terms like "hypothesis" or "test this change." Terms such as "hypothesis" and "test this change" are common across many workflows, making the activation scope broader and less specific than the skill's actual domain.

VirusTotal

66/66 vendors flagged this skill as clean.