Persona Customer Support

• Outcome: Review
• Latest audit: May 29, 2026 at 9:30 PM UTC
• Version:
  1.0.12

Overview

This is a coherent customer-support skill, but it can access customer email and update shared business tools without clear approval or data-handling limits.

Install only for a support account where the agent is allowed to access customer email and update shared Workspace records. Before use, configure least-privilege access, confirm the support label, target sheet, Chat space, and calendar, and require human review before sending customer-facing messages, posting escalations, or creating follow-up events.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 87% confidence
• Finding: The skill instructs the agent to triage customer email, convert emails into tasks, append ticket data to sheets, escalate issues in chat, and schedule follow-ups without any guidance to minimize, classify, redact, or obtain approval for handling sensitive customer data. In a customer support persona, emails commonly contain PII, account details, incident data, or other confidential information, so silently propagating that content across multiple external tools increases the chance of over-collection, unauthorized disclosure, and privacy/compliance violations.

VirusTotal

63/63 vendors flagged this skill as clean.