Geo Bulk Processor

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:16 PM UTC
• Version:
  0.1.0

Overview

This skill is a disclosed planning aid for bulk GEO content workflows and does not show hidden data access, persistence, or automatic mutation behavior.

This appears safe to install for users who want help planning large-scale GEO content updates. Before using it on real business content, confirm the user-provided corpus is intended to be shared with the agent and keep final CMS or site changes behind normal review, staging, and rollback controls.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Low

• Confidence: 78% confidence
• Finding: This is a JSON manifest/evals file, so vague-trigger review applies. The prompts repeatedly say to 'Use the geo-bulk-processor skill' for broad GEO planning tasks, but the file provides no explicit trigger boundaries, exclusion conditions, or negative examples clarifying when this skill should or should not be invoked.

VirusTotal

66/66 vendors flagged this skill as clean.