The World As It Is

Security checks across malware telemetry and agentic risk

Overview

This is a text-only leadership advice skill based on a memoir, with broad activation wording but no hidden code, credentials, persistence, or destructive behavior.

Before installing, be aware this skill may activate broadly around pressure, bureaucracy, disinformation, Obama-era politics, or self-help-style requests. It appears safe from a security perspective, but you may want to invoke it explicitly when you want this specific memoir-derived framework rather than general advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 94% confidence
Finding: The trigger list includes broad, natural-language phrases such as being under pressure, blocked by a system, or losing perspective, plus generic political terms. This can cause the skill to activate in many ordinary conversations where the user did not intend to invoke this skill, leading to context hijacking and irrelevant or overly prescriptive responses.

Vague Triggers

Medium

Confidence: 96% confidence
Finding: The catch-all phrase "Map this book to my life" is extremely vague and can match many benign self-help style requests, especially when combined with the instruction to proactively present onboarding. In context, this increases the risk of unintended invocation and response steering, because the skill may insert itself even when the user is asking for general advice rather than this specific memoir-derived framework.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal