Learning Growth Coach

• Outcome: Pass
• Latest audit: Jun 17, 2026 at 6:03 PM UTC
• Version:
  1.1.0

Overview

This skill is a local learning coach that helps users track practice sessions and does not show hidden network access, credential use, or unsafe automation.

Install only if you are comfortable keeping practice notes in local markdown files. Use a private directory, avoid recording secrets or highly sensitive personal details, and be careful not to sync or commit .learnings files unintentionally.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

• Confidence: 84% confidence
• Finding: The skill instructs users to persist practice logs and self-assessments to local files without any privacy notice, retention guidance, or warning that entries may contain sensitive personal performance data. While the data stays local in the examples, users could unintentionally store confidential career, health, or learning-related notes in plaintext files that are later synced, shared, or committed.

VirusTotal

63/63 vendors flagged this skill as clean.