Mating In Captivity

Security checks across malware telemetry and agentic risk

Overview

The skill appears non-destructive, but its activation scope is broad enough to intrude into many sensitive relationship or sexual-health conversations.

Review the trigger list before installing or publishing. Prefer explicit invocation or narrow phrases tied to the skill's actual title, author, or distinctive use case, and avoid using it as general-purpose advice for sexual health, marriage, or intimate relationship issues without clear user intent.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

High
Confidence
94% confidence
Finding
The trigger list is extremely broad and includes generic terms like love, sex, marriage, relationships, intimacy, and even users saying they just installed the skill or do not know how to start. This can cause the skill to activate in many unrelated conversations, creating prompt hijacking of the assistant’s behavior and crowding out safer or more relevant routing, especially in sensitive relationship or sexual-health contexts.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal