Wishful Drinking

Security checks across malware telemetry and agentic risk

Overview

This is a content-only Carrie Fisher memoir skill with no executable code, credentials, persistence, or data access, though its topic triggers are broad around addiction and mental health.

Reasonable to install if you want a Wishful Drinking/Carrie Fisher reading companion. Use caution when asking about addiction, bipolar disorder, or mental health: this skill is for memoir context and reflection, not diagnosis, treatment, crisis support, or recovery planning.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 94% confidence
Finding: The trigger list is broad enough to activate on common topics such as addiction, bipolar disorder, fame, and Star Wars, which can cause the skill to insert itself into unrelated or sensitive conversations. In a mental-health-adjacent context, over-triggering can derail user intent, create confusing unsolicited guidance, and surface book-specific framing where the user may be seeking general or crisis-appropriate support.

Vague Triggers

Medium

Confidence: 90% confidence
Finding: The phrase 'I'll show up whenever I sense this book could help' defines activation with vague, subjective criteria and no clear boundary conditions. That ambiguity increases the chance of unsolicited intervention in unrelated conversations, especially around sensitive subjects like substance use or mental health, where incorrect routing can be harmful or inappropriate.

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal