Home Moving

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:27 PM UTC
• Version:
  0.1.0

Overview

The skill appears purpose-aligned for moving-service help, with only a minor concern that its trigger examples may be too broad.

This skill can be installed as a benign moving-service helper, but users should be aware that broad trigger phrases may activate it for requests that are not clearly about moving, hauling, packing, or booking services.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The example trigger phrases are highly generic and can match normal user queries unrelated to an explicit invocation of this skill. In a routing or skill-selection system, this can cause overbroad activation, unintended handling of user requests, and data being sent to the wrong tool or workflow.

VirusTotal

58/58 vendors flagged this skill as clean.