The Wisdom Of Crowds

Security checks across malware telemetry and agentic risk

Overview

This is a text-only literary/political analysis skill with no executable code or data access, though its activation language is broad enough that users may see it in loosely related conversations.

Install this if you want a book-based framework for thinking about movements, institutions, and political conflict. Be aware it may respond to broad phrases about turmoil, revolution, or collapse, so users who do not want unsolicited political or literary framing may prefer narrower activation wording.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The trigger phrases are broad enough to match common emotional or political statements that may arise in many unrelated conversations, causing the skill to activate outside its intended literary/framework context. In a politically charged domain, over-triggering can steer users into unsolicited ideological framing or advice when they did not ask for it, increasing the risk of inappropriate intervention and scope creep.

Vague Triggers

Medium

Confidence: 88% confidence
Finding: The phrase that the skill will appear whenever it 'senses this book could help' creates an undefined and highly subjective activation boundary. Combined with the requirement to proactively present the entire Quick Start, this can lead to unsolicited injection of persuasive political framing into conversations that only loosely resemble the listed themes.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal