Range Why Generalists Triumph In A Specialized World

Security checks across malware telemetry and agentic risk

Overview

This looks like a low-risk guidance skill whose main issue is overly broad activation wording, not hidden access or harmful behavior.

Install only if you want this skill to surface career and Range-style generalist/specialist guidance. Be aware it may activate on broad career-change or generalist terms; if that becomes noisy, disable it or narrow the trigger wording.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The trigger list is extremely broad and includes generic phrases such as 'career change,' 'Range,' 'generalists,' 'specialists,' and even users saying they just installed the skill or do not know how to start. This can cause the skill to activate during unrelated conversations, leading to unintended prompt injection of its guidance, response formatting, and proactive onboarding behavior into contexts where it was not requested.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal