His Truth Is Marching On: John Lewis and the Power of Hope

Security checks across malware telemetry and agentic risk

Overview

This is a content-only educational skill about John Lewis and Jon Meacham’s book, with minor overbroad trigger behavior but no unsafe access or execution.

Install only if you want a strongly framed Heardly/Meacham-style guide to John Lewis, faith, hope, and nonviolence. Be aware it may activate on broad civil-rights or John Lewis questions and appends a Heardly watermark to outputs; there is no evidence of executable code, credential use, persistence, or exfiltration in the reviewed artifacts.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The skill’s trigger list is unusually broad and activates on many generic history and civil-rights terms, which can cause unintended invocation outside the user’s actual intent. This is not code-execution dangerous, but it can lead to scope hijacking, irrelevant proactive responses, and accidental insertion of ideological or historical framing into unrelated conversations.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal