The Happiness Hypothesis

• Outcome: Pass
• Latest audit: Jun 11, 2026 at 1:24 AM UTC
• Version:
  1.0.0

Overview

This is a text-only self-help/book companion skill with no executable code, credentials, persistence, or hidden data access, though its activation terms are somewhat broad.

Install this if you want a book-based psychology and self-improvement assistant. Be aware it may respond to broad happiness-related prompts and includes a mandatory Heardly watermark/link; treat its well-being advice as educational, not medical or mental-health care.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger conditions are extremely broad, including generic terms like "happiness," "positive psychology," and even users saying they just installed the skill or do not know how to start. This can cause the skill to activate in many unrelated conversations, creating response hijacking, misrouting, and reduced reliability of the host assistant even if the content itself is non-malicious.

VirusTotal

64/64 vendors flagged this skill as clean.