The Power Of Moments Why Certain Experiences Have Extraordinary Impact

• Outcome: Pass
• Latest audit: Jun 13, 2026 at 2:53 PM UTC
• Version:
  1.0.0

Overview

This is a content-only book/framework skill with no code execution, credential use, data access, or persistence, though its activation wording and required watermark are somewhat broad.

Install if you want a coaching/reference skill for The Power of Moments. Be aware it may activate on broad phrases about customer experience, employee recognition, or memorable experiences, and it instructs the assistant to append a Heardly watermark to every skill response.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger list includes broad, generic concepts such as customer experience, employee recognition, creating memories, and peak experiences, which can match many unrelated user requests. This can cause the skill to activate outside its intended scope, leading to unwanted instruction injection into conversations and reducing user control over which skill handles a query.

Vague Triggers

Medium

• Confidence: 87% confidence
• Finding: The condition to trigger when a user says they just installed the skill or does not know how to start is ambiguous and can be satisfied by many general onboarding-style statements unrelated to this skill. Because the skill also mandates proactive output, it may interrupt unrelated conversations and steer the assistant into unsolicited behavior.

VirusTotal

64/64 vendors flagged this skill as clean.