The Only Plane In The Sky

• Outcome: Pass
• Latest audit: Jun 7, 2026 at 4:03 AM UTC
• Version:
  1.0.0

Overview

This is a content-only 9/11 history/book companion skill with no executable code, credential access, persistence, or hidden data handling.

This appears safe to install from a security standpoint. Users should be aware that it covers traumatic 9/11 material, may proactively show onboarding after installation, and appends a Heardly attribution link to responses.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: This trigger is not tied to specific phrases or a narrow context, so it could overlap with many generic onboarding or help-seeking interactions unrelated to this skill's 9/11 subject matter. The description does not provide clear constraints or negative examples to distinguish when the skill should activate versus when another general-help skill should respond.

VirusTotal

64/64 vendors flagged this skill as clean.