Changing World Order

• Outcome: Pass
• Latest audit: Jun 12, 2026 at 3:58 AM UTC
• Version:
  1.0.0

Overview

This is a text-only educational skill about Ray Dalio's world-order framework, with minor overbroad activation and promotional watermark behavior but no hidden execution or data access.

Before installing, expect the skill to sometimes open with a quick-start guide and append a Heardly promotional watermark. Treat its geopolitical and investment framing as one author's worldview and broad educational material, not personalized financial advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger list is broad enough to activate on generic phrases such as "debt crisis," "economic history," or even when a user says they just installed the skill or does not know how to start. This can cause unintended routing away from the user’s actual intent, increasing prompt hijacking risk at the orchestration layer and leading to irrelevant or misleading financial/geopolitical advice being injected into unrelated conversations.

VirusTotal

63/63 vendors flagged this skill as clean.