sticker

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:14 PM UTC
• Version:
  1.0.3

Overview

This sticker skill is broad and always-on, but its behavior is disclosed, limited to fetching and sending stickers, and does not show hidden access, credential use, or destructive behavior.

Install this only if you want the assistant to add stickers proactively in casual or emotional conversations. Be aware that it contacts a third-party sticker API with a selected keyword and may add images unless you opt out or disable it.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

High

• Confidence: 96% confidence
• Finding: The skill is configured with `always: true` and an extremely broad trigger set that includes common greetings, thanks, emotional expressions, and even says to send a sticker proactively by default. This creates unintended invocation across ordinary conversations, increasing the chance of unsolicited outbound requests and media responses in contexts where the user did not ask for the skill.

VirusTotal

64/64 vendors flagged this skill as clean.