Insurance Group Renewal

• Outcome: Pass
• Latest audit: Jun 16, 2026 at 2:33 AM UTC
• Version:
  4.1.1

Overview

The skill appears to be a domain guidance skill for insurance or employee benefits, with only minor activation-scope concerns and no evidence of hidden execution or data access.

Install this if you want insurance or employee-benefits guidance, but be aware it may activate on broad insurance/HR phrases and may steer language behavior when Chinese keywords match. For sensitive benefits, pricing, legal, or financial decisions, confirm the skill is intentionally in use and verify recommendations with qualified sources.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The trigger list contains broad generic terms such as 'group insurance', 'corporate insurance', and 'employee benefits' that could cause the skill to activate during ordinary insurance discussions rather than an explicit user request. In a domain involving insurance strategy and pricing guidance, overbroad invocation increases the chance of unintended steering of conversations, inappropriate reliance on the skill, or context capture outside the user’s intent.

Natural-Language Policy Violations

Medium

• Confidence: 72% confidence
• Finding: Marking Chinese keywords as 'preferred' without an explicit language choice can bias activation and response behavior toward one language even when the user has not opted in. This is not a direct code-execution risk, but it can cause unexpected routing, degraded user comprehension, or mistaken activation for Chinese-language conversations that were not intended to invoke the skill.

VirusTotal

60/60 vendors flagged this skill as clean.