Sustainability Playbook

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:16 PM UTC
• Version:
  0.1.0

Overview

This is a sustainability and ESG guidance skill with broad activation wording, but the artifacts show advisory markdown content rather than hidden access, persistence, or unsafe behavior.

Install this if you want broad ESG and sustainability assistance. Be aware it may activate for general business conversations that mention sustainability-adjacent topics, and verify regulatory or legal details against current authoritative sources before relying on them.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

High

• Confidence: 98% confidence
• Finding: The manifest text says to trigger on "ANY sustainability, ESG, social responsibility, ethical sourcing, carbon management, climate strategy, or responsible business topic" and adds "If in doubt, use this skill." This is an intentionally expansive activation scope with no exclusions or negative examples, making accidental invocation likely during ordinary business discussions that only loosely touch these topics.

VirusTotal

65/65 vendors flagged this skill as clean.