FOSMVVM Leaf View Generator

• Outcome: Pass
• Latest audit: May 28, 2026, 11:31 AM
• Version:
  2.0.6

Overview

This is a documentation-only code-generation skill for FOSMVVM Leaf templates, with no executable code, credential use, persistence, or hidden behavior found.

Safe to install for generating FOSMVVM Leaf templates. Before using it, keep the conversation focused on the ViewModel/template you want generated and review any produced HTML for exposed identifiers or data attributes that should not be client-visible.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 82% confidence
• Finding: The skill explicitly says it 'references conversation context automatically' and 'determine[s] template structure' from prior discussion without clear activation boundaries or scoping rules. In an agent setting, broad reliance on ambient conversation state can cause the skill to act on unrelated or attacker-planted context, leading to confused-deputy behavior, incorrect code generation, or propagation of unsafe assumptions into generated templates.

VirusTotal

64/64 vendors flagged this skill as clean.