AetherLang Strategy V3

• Outcome: Pass
• Latest audit: May 27, 2026 at 10:02 PM UTC
• Version:
  2.0.0

Overview

This is a disclosed external API connector for business strategy analysis, with no executable code, credential requests, local file access, persistence, or destructive behavior in the artifacts.

Treat this like using an external AI strategy service. Avoid sending confidential financials, customer data, unreleased plans, credentials, or regulated information unless you trust the provider and are comfortable with api.neurodoc.app processing the query.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 84% confidence
• Finding: The usage guidance is broad enough that the skill may be triggered for many ordinary business questions without clearly warning users that their prompts will be sent to a third-party API. In an agent environment, overly broad invocation increases the chance of unintended data disclosure, especially when users include sensitive business plans, financials, or internal market assumptions in a 'strategy' request.

VirusTotal

65/65 vendors flagged this skill as clean.