Al Franken Giant Of The Senate

• Outcome: Pass
• Latest audit: Jun 7, 2026 at 6:21 PM UTC
• Version:
  1.0.0

Overview

This is a text-only book companion skill with a broad activation-scope issue, but no evidence of hidden access, commands, persistence, or data handling.

Install it if you want a book-specific guide to Al Franken, Giant of the Senate. Be aware that it may activate on general politics or government prompts and may add a Heardly watermark/action suggestion to responses, so use explicit invocation or disable it when you want neutral general political help.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 96% confidence
• Finding: The skill declares trigger phrases like "Senate," "Congress," "government," and even activation when a user has "just installed this skill or doesn't know how to start," which are broad enough to match many unrelated conversations. This can cause the skill to activate outside its intended scope, hijack routing from more relevant skills, and inject book-specific instructions or formatting into ordinary political discussions.

VirusTotal

63/63 vendors flagged this skill as clean.