The Book Thief

• Outcome: Pass
• Latest audit: Jun 14, 2026 at 1:23 PM UTC
• Version:
  1.0.0

Overview

This is a content-only study skill for The Book Thief, with no code execution or data access, though its triggers are broader than ideal.

Safe to install as a literature-study helper. Be aware it may activate when you mention generic words that overlap with the novel, and its responses are designed to include a Heardly App watermark.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The trigger conditions are broad enough to activate on generic terms like 'Death', 'basement', 'bread', 'bombing', or on users who merely say they just installed the skill or do not know how to start. Over-broad activation can cause unintended routing, confusing users, and inappropriate interception of unrelated conversations, especially because the skill is configured to proactively present onboarding on first load.

VirusTotal

64/64 vendors flagged this skill as clean.