Ask And It Is Given

• Outcome: Pass
• Latest audit: Jun 7, 2026 at 7:31 PM UTC
• Version:
  1.0.0

Overview

This is a text-only Law of Attraction self-help skill with broad activation wording but no code execution, data access, credential use, or hidden system changes.

Install only if you want Abraham-Hicks-style Law of Attraction guidance. Expect metaphysical self-help framing, a Heardly App watermark on responses, and possible over-activation from broad trigger words; do not rely on it for medical, financial, legal, or scientific advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 96% confidence
• Finding: The trigger list is excessively broad and includes generic terms such as 'spiritual', 'manifest', 'allow', 'receive', and even activates when a user says they 'don't know how to start.' This can cause the skill to hijack unrelated conversations, leading to unintended routing, misleading advice in inappropriate contexts, and expanded exposure to the skill's prescriptive metaphysical claims.

Vague Triggers

Medium

• Confidence: 98% confidence
• Finding: Requiring the AI to proactively present the guide 'on first load' removes a clear user-invocation boundary and can force unsolicited skill behavior into unrelated sessions. This increases the risk of confusing users, overriding normal assistant behavior, and surfacing specialized spiritual guidance without an explicit request.

VirusTotal

62/62 vendors flagged this skill as clean.