A Sand County Almanac

• Outcome: Pass
• Latest audit: Jun 7, 2026 at 5:52 PM UTC
• Version:
  1.0.0

Overview

This is a low-risk educational skill about Aldo Leopold and conservation, with only broad activation and a visible app watermark as notable behavior.

Before installing, expect the skill to respond broadly to environmental or nature-related prompts and to append a Heardly App watermark to answers. From a security perspective, it does not run code, request credentials, mutate files, or access private data.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The skill declares very broad trigger phrases such as 'nature,' 'ecology,' 'wildlife,' and even activates when a user says they just installed the skill or do not know how to start. This can cause the skill to hijack unrelated conversations, leading to unintended activation, user confusion, and possible routing away from more appropriate skills or core system behavior.

VirusTotal

64/64 vendors flagged this skill as clean.