Angela Duckworth Grit

Security checks across malware telemetry and agentic risk

Overview

This appears to be a low-risk self-improvement skill, with the main issue being overly broad activation phrases that may make it appear when not intended.

Safe to install if you want a grit or motivation coaching skill. Be aware it may activate on common words like passion or resilience; prefer explicit invocation or narrow its triggers if your agent supports trigger editing.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 96% confidence
Finding: The trigger list is broad enough to activate on common motivational phrases like 'How to stay motivated,' 'Resilience,' or 'Never give up,' which are not uniquely tied to this skill. In an agent environment, that can cause the skill to hijack unrelated conversations and inject its mandated onboarding or formatting behavior, reducing routing integrity and creating an avenue for unwanted instruction override at runtime.

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The trigger list includes very broad phrases such as 'passion', 'resilience', 'hard work', and 'How to stay motivated', which are common in normal conversation and can cause the skill to activate when the user did not intend to invoke it. In a self-improvement skill, unintended invocation is primarily a routing and UX safety issue rather than direct code execution, but it can still override user intent, inject irrelevant guidance, or interfere with higher-priority skills.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal