AI Prompt Researcher

• Outcome: Pass
• Latest audit: May 28, 2026, 10:34 AM
• Version:
  1.0.1

Overview

This skill is a local GEO prompt research report generator with no hidden network, credential, or privileged behavior found.

Reasonable to install for marketing or GEO prompt research. Run the included script intentionally, choose the output path carefully because it can overwrite that file, and do not assume the advanced helper commands mentioned in the docs are available unless you inspect any additional scripts first.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 79% confidence
• Finding: The description uses broad trigger language such as 'Use whenever the user mentions researching AI search queries' and similar generic phrasing. This can cause over-broad or unintended invocation in unrelated contexts, potentially exposing user data or causing the agent to perform unnecessary research actions when the user did not explicitly request this skill.

VirusTotal

64/64 vendors flagged this skill as clean.