Fermentation Food Preservation

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:30 PM UTC
• Version:
  1.0.0

Overview

This is a food preservation guidance skill with no executable code, and its only notable issue is a broad but purpose-related reminder trigger.

Install if you want preservation guidance, but treat canning instructions as safety-sensitive: verify recipes and processing times against official local food-safety sources. If your agent supports automatic triggers or memory, review whether you want it to store preservation state or send garden/harvest and sourdough reminders.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The trigger condition matches broad everyday terms like 'garden' or 'harvest' anywhere in user context, which can cause the skill to activate unexpectedly in unrelated conversations. This is not code execution or data exfiltration, but it can create confusing, unintended behavior and increase the chance of the agent delivering preservation guidance when it was not explicitly requested.

VirusTotal

55/55 vendors flagged this skill as clean.