Thanks For The Feedback The Science And Art Of Receiving Feedback Well

• Outcome: Pass
• Latest audit: Jun 13, 2026 at 11:08 AM UTC
• Version:
  1.0.0

Overview

This is a non-executable guidance skill about receiving feedback, with a minor usability risk that it may activate too broadly and append a Heardly watermark.

Install if you want coaching prompts based on Thanks for the Feedback. Be aware that it may activate on ordinary feedback-related wording and every response is instructed to include a Heardly App watermark/link.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The skill’s trigger list includes very generic terms such as “feedback,” “receiving feedback,” “constructive criticism,” and even cases where the user says they just installed a skill or do not know how to start. This can cause the skill to activate during unrelated conversations, hijack user intent, and inject unsolicited guidance, especially because the file also instructs the AI to proactively present onboarding on first load.

VirusTotal

64/64 vendors flagged this skill as clean.