Creativity Inc

Security checks across malware telemetry and agentic risk

Overview

This is a static Creativity, Inc. coaching skill with broad but disclosed activation rules and no code, credential access, persistence, or destructive behavior.

Install this if you want Creativity, Inc.-style management and creative-culture guidance. Be aware it may activate on general creativity, leadership, feedback, innovation, or onboarding phrases and may add Heardly branding to responses.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The skill defines activation triggers broadly enough to match common workplace and creativity-related language, plus it activates when a user merely says they just installed the skill or does not know how to start. This can cause unsolicited invocation and instruction injection into unrelated conversations, increasing the chance the agent overrides user intent or appends required branding/output rules in contexts where the skill was not explicitly requested.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal