The Warmth Of Other Suns

Security checks across malware telemetry and agentic risk

Overview

This is a non-executable educational skill about a specific history book, with a minor risk that its broad trigger terms could activate it in unrelated conversations.

Install only if you want a book-focused history assistant that may respond to some broad topics like migration, American history, or freedom. Expect branded watermark text in its answers; there is no evidence of executable or data-access behavior.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The skill declares very broad trigger terms such as "migration," "American history," "the South," "freedom," and even activation when a user says they just installed the skill or do not know how to start. These phrases overlap heavily with normal conversation, so the skill may activate outside the user's intent and steer unrelated discussions into this skill's content, creating prompt-routing confusion and reducing user control.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal