ASO & App Cold Start — Organic Discovery & UGC Growth Playbook

• Outcome: Pass
• Latest audit: Jun 3, 2026 at 8:06 AM UTC
• Version:
  2.2.10

Overview

This is a markdown-only ASO and app growth guide with no executable code, credential access, or persistence; users should still review its marketing tactics and broad triggers.

Install only if you want ASO and app-growth advice. Be aware that it links to external tools, author profiles, and a paid bundle, and some suggested growth tactics may conflict with app-store or social-platform rules; review those before applying them.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The trigger list includes generic phrases such as "ASO," "app growth," and "app launch," which are broad enough to activate during ordinary product or marketing discussions outside the user's intent to invoke this specific skill. Over-broad activation can cause inappropriate routing, unexpected execution of the skill, and exposure to unrequested guidance or linked external resources, especially in multi-skill environments.

VirusTotal

64/64 vendors flagged this skill as clean.