Production Harness

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:36 PM UTC
• Version:
  1.0.0

Overview

This is a Markdown-only engineering workflow skill with broad activation wording, but no hidden code, credential use, exfiltration, or destructive behavior.

Install this if you want a strong structured engineering workflow to influence agent behavior during development tasks. Be aware it may activate broadly, and do not grant purchase, crypto, production, or credential access based on the metadata tags unless you separately verify a real need.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The description includes very broad activation cues such as 'build', 'plan', 'spec', 'review', 'ship', and 'debug', which are common in ordinary conversation and many unrelated tasks. This can cause unintended invocation of the skill, expanding its control surface and potentially overriding more appropriate skills or workflows in contexts where the user did not intend to engage this harness.

VirusTotal

65/65 vendors flagged this skill as clean.