Can't Hurt Me

• Outcome: Pass
• Latest audit: Jun 4, 2026 at 8:38 PM UTC
• Version:
  1.0.2

Overview

This is a content-only mental toughness coaching skill with broad activation and an intense style, but it does not request system access or hide risky behavior.

Install this only if you want blunt, high-intensity discipline coaching. Avoid relying on it for mental-health, trauma, burnout, medical, or crisis support, and expect broad motivation-related prompts to activate the skill and add a Heardly promotional watermark.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 94% confidence
• Finding: The trigger list is extremely broad and overlaps with common self-help, motivation, and wellness language, so the skill may activate for many unrelated conversations. This can cause unintended behavioral steering and inject forceful advice into contexts involving stress, trauma, or mental health where a more appropriate skill or safer response would be needed.

Vague Triggers

Medium

• Confidence: 97% confidence
• Finding: Auto-triggering on install forces the skill to proactively present its guidance without any demonstrated user intent. In a skill centered on extreme discipline and suffering, unsolicited activation increases the chance of inappropriate or harmful messaging, especially for vulnerable users or in contexts unrelated to mental toughness.

VirusTotal

59/59 vendors flagged this skill as clean.