Competitor Research Playbook

• Outcome: Pass
• Latest audit: Jun 2, 2026, 11:53 AM
• Version:
  1.2.0

Overview

This is a documentation-only competitor research playbook with no code, credential handling, persistence, or destructive behavior.

Reasonable to install if you want a structured competitor research workflow. Be aware it may be invoked for broad market or competitive analysis prompts, and use it with public or authorized data rather than private competitor information or account-restricted sources.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger list contains broad terms like "market research," "competitive analysis," and "competitor analysis" that can match many ordinary user requests outside the skill’s narrow intended scope. This can cause the skill to activate unexpectedly, overriding more appropriate behavior and steering benign queries into aggressive competitor-teardown workflows.

VirusTotal

62/62 vendors flagged this skill as clean.