Never Split The Difference

Security checks across malware telemetry and agentic risk

Overview

This appears to be a disclosed negotiation-coaching skill, with no evidence of hidden execution, data theft, persistence, or destructive behavior.

Install this if you want broad negotiation coaching. Treat its advice as practical guidance rather than legal, medical, tax, or financial advice, and be aware it may activate for many negotiation-related conversations because its scope is intentionally broad.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The trigger conditions are extremely broad, including generic terms like "Negotiation," "How to negotiate," "Conflict resolution," and even users saying they just installed the skill or do not know how to start. This can cause the skill to activate in unrelated conversations, hijack routing from more appropriate skills, and expose users to manipulative negotiation guidance outside its intended context.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal