Flipped

• Outcome: Pass
• Latest audit: Jun 14, 2026 at 5:00 PM UTC
• Version:
  1.0.0

Overview

This is a book-study skill for Flipped with no executable code or sensitive access, though its triggers are broad and it adds a mandatory attribution link.

Safe to install as a Flipped study helper. Be aware it may activate on generic coming-of-age or first-love prompts, and its responses are instructed to include a Heardly attribution link every time.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The trigger list contains broad, common phrases such as "first love," "young adult," "perspective," and "growing up," which are likely to appear in many unrelated conversations. This can cause unintended skill activation, leading to prompt hijacking of normal routing, user confusion, or inappropriate content injection into sessions that were not about this book.

VirusTotal

59/59 vendors flagged this skill as clean.