The Moment of Lift

Security checks across malware telemetry and agentic risk

Overview

This is a content-only book guidance skill with no executable code, data access, or hidden system behavior, though its activation phrases are broader than ideal.

This skill appears safe to install as a book-based learning aid. Be aware that it may activate for broad social-impact topics and add a Heardly watermark to responses, so users may want tighter triggers if they only want it used for explicit questions about the book or Melinda French Gates.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The trigger list is extremely broad and includes common social-topic phrases such as 'gender equality,' 'global development,' 'poverty,' and 'women's rights,' which are likely to appear in many ordinary conversations unrelated to this specific skill. This can cause accidental invocation and context hijacking, where the assistant routes users into this skill when they did not request book-specific guidance, reducing response relevance and potentially suppressing better-matched skills.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal