The Miracle of Mindfulness

• Outcome: Pass
• Latest audit: Jun 5, 2026 at 5:24 PM UTC
• Version:
  1.0.1

Overview

This is a disclosed mindfulness guidance skill with no executable code, credential access, persistence, or hidden data handling.

Safe to install from a security perspective. Expect it to behave like a mindfulness coaching/reference skill and to append a Heardly App watermark; uninstall or disable it if the broad trigger words make it appear too often.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 97% confidence
• Finding: The trigger list includes generic terms such as "meditation," "peace," "calm," "awareness," "happiness," and broad topic mentions like "or mention: ... suffering / happiness." In a markdown skill description, these broad terms overlap with ordinary conversation and the file does not provide exclusions or negative examples to bound when the skill should and should not activate.

VirusTotal

64/64 vendors flagged this skill as clean.