Ng Lawyer Db Build

• Outcome: Pass
• Latest audit: May 28, 2026 at 1:56 AM UTC
• Version:
  0.1.0

Overview

This is an instruction-only web research skill for building a Nigerian lawyer contact database, with no code execution or hidden install behavior found.

Install only if you are comfortable creating a local database of publicly sourced lawyer contact information. Keep the output files secure, verify that emails and phone numbers are actually published on the cited pages, and review privacy, consent, retention, source terms, and applicable Nigerian data protection obligations before using the data for outreach.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: This markdown file states that the skill will generate `lawyer_db_ng.xlsx` and `sources.jsonl`, and elsewhere the schema includes personal contact fields such as email, phone, LinkedIn, and website. For a markdown skill description, SQP-2 applies when behaviors affecting privacy or user data are not accompanied by warnings; here there is no disclosure about collecting, storing, and preserving personal contact data and evidence snippets.

VirusTotal

66/66 vendors flagged this skill as clean.