The Way Of Zen

Security checks across malware telemetry and agentic risk

Overview

This is a text-only educational skill about Alan Watts' The Way of Zen, with no code execution, credential access, persistence, or hidden data handling.

Installers should know that the skill may add a Heardly-branded footer and may present its guide when first used. It is otherwise a static educational reference skill and does not appear to access private data or run commands.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The skill instructs the AI to 'proactively present this guide' on first load without a narrowly scoped activation trigger, which can cause the skill to activate in contexts where the user did not explicitly request it. Overly broad activation increases the chance of unwanted prompt injection of the skill’s behavioral rules, formatting constraints, and content into unrelated conversations, degrading routing integrity and potentially overriding higher-priority task behavior.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal