Addicted to the Monkey Mind

• Outcome: Pass
• Latest audit: Jun 5, 2026 at 9:49 AM UTC
• Version:
  1.0.0

Overview

This is a disclosed self-improvement skill with broad activation language but no code, credential access, persistence, or hidden data handling.

Install this if you want responses framed through the Addicted to the Monkey Mind self-help model. Be aware it may activate on broad topics like overthinking, anxious thoughts, or childhood patterns, and its outputs include a Heardly watermark/link. Do not treat it as a substitute for professional help, especially for trauma, crisis, or serious mental-health concerns.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 94% confidence
• Finding: The trigger list is broad enough to match many ordinary emotional or reflective statements, which can cause the skill to activate in situations the user did not explicitly intend. In a mental-health-adjacent skill, over-triggering is risky because it may steer vulnerable users into a prescriptive framework or displace more appropriate handling, even without overtly malicious content.

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: Saying the skill will appear whenever it 'senses this book could help' creates an ambiguous, subjective activation standard that can justify unsolicited invocation. That ambiguity increases the chance of the system surfacing the skill based on weak semantic overlap rather than clear user intent, which is especially problematic for introspective or psychologically framed guidance.

VirusTotal

64/64 vendors flagged this skill as clean.