Prompt-injection style instruction pattern detected.
Warn
- Code
- suspicious.prompt_injection_instructions
- Location
- SKILL.md:144
Security audit
Client Relationship Manager
Security checks across malware telemetry and agentic risk
Overview
This is a plain-text CRM guide with local file workflows; the main caution is to avoid putting real credentials or secrets into CRM notes.
Install only if you are comfortable keeping CRM data in local markdown files. Do not store passwords, API keys, recovery codes, or session tokens in the CRM; track only access status or a reference to a password manager or vault. Review the optional cron/Telegram example before enabling it, since it can send CRM summaries outside the workspace.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.prompt_injection_instructions