The Sun Does Shine

• Outcome: Pass
• Latest audit: Jun 7, 2026 at 6:57 AM UTC
• Version:
  1.0.1

Overview

This is a text-only book companion skill with some broad activation and branding instructions, but no evidence of unsafe access or actions.

Install this if you want a book-centered companion for The Sun Does Shine and related themes such as wrongful conviction, death row, forgiveness, and hope. Be aware it may surface on broad emotional or justice-related prompts and appends Heardly branding to responses; maintainers should consider narrowing triggers to explicit book, author, or wrongful-conviction requests.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The trigger list includes very broad terms such as "hope," "forgiveness," "prison," and even activation when the user says they just installed the skill or do not know how to start. This can cause the skill to activate in unrelated conversations, creating prompt hijacking of normal user intent and increasing the chance that book-specific instructions override the assistant's expected behavior.

VirusTotal

63/63 vendors flagged this skill as clean.