Security Analysis: Sixth Edition

• Outcome: Pass
• Latest audit: Jun 9, 2026 at 11:49 AM UTC
• Version:
  1.0.0

Overview

This appears to be a finance/value-investing guidance skill with no evidence of malware, credential access, persistence, or destructive behavior.

Install this only if you want the agent to apply this investing/security-analysis framework. Because it may activate on broad finance terms, be explicit when you want general financial discussion instead, and do not treat its output as personalized financial advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 96% confidence
• Finding: The skill advertises activation on very broad terms like 'investment', 'management', 'earnings', 'stock market', and 'security analysis', which are common in ordinary finance conversations and could cause the skill to trigger when the user did not intend to invoke it. This creates prompt-scope confusion and increases the chance the assistant follows skill-specific behavior in unrelated contexts, especially because the skill also instructs proactive behavior on first load and rigid output formatting.

VirusTotal

64/64 vendors flagged this skill as clean.