Persona Team Lead

• Outcome: Review
• Latest audit: May 29, 2026 at 9:30 PM UTC
• Version:
  1.0.12

Overview

This team-lead persona is coherent, but it can drive sensitive Google Workspace reads, posts, and shared document updates without clear confirmation or destination limits.

Review before installing. Use this only with a least-privileged Google Workspace account, verify the dependent gws skills separately, restrict allowed Chat spaces and Sheets, and require explicit confirmation before reading email-derived data, posting to Chat, or writing shared team records. Use sanitization by default for employee or business-sensitive content.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The description 'Lead a team — run standups, coordinate tasks, and communicate.' is broad and uses common workplace language that could match many ordinary user requests, causing the persona skill to be invoked unintentionally. Because this skill can drive calendar, email, chat, drive, and sheets-related actions through prerequisite skills, accidental invocation could lead to over-broad access to sensitive workplace data or unintended communications.

VirusTotal

63/63 vendors flagged this skill as clean.