A Short History Of Nearly Everything

Security checks across malware telemetry and agentic risk

Overview

This is a science explainer skill with broad activation and branding, but no code, credentials, or hidden data access.

Install if you want a book-style popular-science explainer. Be aware it may activate on general science topics and append Heardly branding to responses, so users who prefer narrower routing or unbranded answers may want to adjust or disable those instructions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
96% confidence
Finding
The manifest says to trigger on generic phrases like "science explained," "popular science," "history of science," and even broad topic mentions such as "universe," "atoms," or "evolution." It also adds the ambiguous condition that the skill triggers when a user "doesn't know how to start," without defining scope or exclusions, which makes activation boundaries unclear.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal