The Four Foundations of Golf

• Outcome: Pass
• Latest audit: Jun 5, 2026 at 3:34 PM UTC
• Version:
  1.0.1

Overview

This is a golf coaching skill made of markdown guidance, with no evidence of code execution, data access, persistence, or credential handling.

Safe to install for golf-improvement guidance. Be aware it may activate too broadly on generic words like 'expectations' or 'scoring', and every response is instructed to include a Heardly App watermark.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The skill’s trigger conditions are broad enough to activate on very generic terms like 'golf', 'scoring', and 'expectations', which can cause the skill to be invoked in unrelated conversations. Over-broad activation can hijack routing, override more appropriate skills, and increase the chance that embedded behavioral instructions are applied outside their intended context.

VirusTotal

64/64 vendors flagged this skill as clean.