Paper Avalanche

• Outcome: Pass
• Latest audit: Jun 14, 2026 at 3:05 PM UTC
• Version:
  1.0.0

Overview

This is a text-only book guide with no executable behavior, though its broad trigger terms and mismatched capability metadata should be cleaned up.

Reasonable to install if you want a Paper Avalanche discussion guide. Be aware it may activate during general conversations about hoarding, shame, family intervention, or social services, and its marketplace capability tags should be corrected because the artifacts do not support financial, purchase, or crypto capabilities.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 97% confidence
• Finding: The trigger list includes broad, common terms such as "hoarding," "clutter," "isolation," "shame," and "intervention," which are likely to appear in many unrelated user conversations. This can cause unintended invocation of the skill, leading the assistant to inject irrelevant book-specific guidance into sensitive discussions about mental health, family issues, or social services.

VirusTotal

64/64 vendors flagged this skill as clean.