The Autobiography of Martin Luther King, Jr.

• Outcome: Pass
• Latest audit: Jun 9, 2026 at 9:30 AM UTC
• Version:
  1.0.0

Overview

This is a text-only MLK autobiography/history skill with some overly broad activation and promotional behavior, but no evidence of harmful access or hidden execution.

Installers should expect this skill to answer MLK and civil-rights questions and to add a Heardly-branded footer. If you use many skills, be aware it may trigger on broad civil-rights terms even when you did not specifically ask for this book.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The trigger list is extremely broad and includes many generic civil-rights, history, and political terms, so the skill may activate in conversations that are not actually requesting this specific book skill. That can cause unwanted instruction injection into unrelated chats, derail user intent, and override more appropriate skills or base assistant behavior.

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The instruction to trigger when a user 'just installed this skill' or 'doesn't know how to start' is ambiguous and forces proactive output without a clear MLK-related intent boundary. In a multi-skill environment, that can cause unsolicited takeover of onboarding flows or unrelated conversations, creating confusion and reducing user control.

VirusTotal

64/64 vendors flagged this skill as clean.