Silent Spring

• Outcome: Pass
• Latest audit: Jun 11, 2026 at 9:42 AM UTC
• Version:
  1.0.0

Overview

This is a text-only educational skill about Silent Spring with no executable code or privileged access, though its broad triggers and required watermark may make it appear in more conversations than users expect.

Install this if you want an opinionated Silent Spring/Rachel Carson learning aid. Be aware it may activate on general pesticide or ecology discussions and append Heardly branding to responses; for current pesticide safety, health, or regulatory decisions, verify advice against up-to-date authoritative sources.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger conditions are broad enough to activate on many general discussions of pesticides, ecology, or environmentalism, including mentions that may not actually request this skill. This can cause unintended invocation, response hijacking, or user confusion by injecting the skill's mandated onboarding and watermark into unrelated conversations.

VirusTotal

63/63 vendors flagged this skill as clean.