Cracked, Not Broken: Surviving and Thriving After a Suicide Attempt

Security checks across malware telemetry and agentic risk

Overview

This is a non-executable mental health memoir skill, but it needs Review because it can activate on active suicide-crisis phrases and shows book-framed guidance before a clear emergency/professional-care disclaimer.

Review carefully before installing, especially for use around people in active crisis. This skill contains suicide and self-harm material and should not replace emergency services, 988 or local crisis lines, licensed clinical care, or immediate in-person support.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

High
Confidence
97% confidence
Finding
The trigger list is unusually broad for a high-risk mental-health skill and includes generic terms such as suicidal ideation, hallucinations, psychiatric hospitalization, and emergency numbers. That can cause the skill to activate in unrelated or fragile contexts, potentially steering users in crisis into book-framed content before appropriate triage or platform-level safety handling occurs.

Vague Triggers

Medium
Confidence
90% confidence
Finding
Triggering when a user says they just installed the skill or does not know how to start is highly ambiguous and overlaps with normal onboarding language. This can cause accidental invocation in unrelated conversations and unsolicited presentation of suicide-related material, which is especially risky in shared or non-consensual contexts.

Missing User Warnings

High
Confidence
95% confidence
Finding
The skill centers on suicide attempt survival and crisis-adjacent guidance but does not begin with a clear disclaimer that it is informational and not a substitute for emergency or professional care. In a self-harm context, that omission can create false reassurance, delay escalation to qualified help, and increase the chance that users treat memoir-derived guidance as crisis intervention.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal