The Color Of Water

• Outcome: Pass
• Latest audit: Jun 14, 2026 at 8:44 AM UTC
• Version:
  1.0.0

Overview

This is a text-only study guide for The Color of Water with some overbroad activation and branding instructions, but no evidence of malicious behavior or sensitive access.

Install only if you want an opinionated study-guide skill for this book. Expect it to add a Heardly watermark and to activate on some broad memoir, race, identity, faith, or education prompts; disable it if that interferes with unrelated conversations.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger list is excessively broad and includes generic terms such as "Memoir," "identity," "Jewish," "Black," "church," "education," and even users saying they just installed the skill or do not know how to start. This can cause unintended activation in unrelated conversations, leading the agent to inject off-topic content or override more relevant routing, which is a real security and safety concern in agent ecosystems even without malicious intent.

VirusTotal

64/64 vendors flagged this skill as clean.