Eridian

• Outcome: Pass
• Latest audit: May 28, 2026 at 1:09 PM UTC
• Version:
  1.0.0

Overview

This appears to be a security-training skill whose sensitive examples are framed as defensive guidance, not actions to run.

Before installing, review the activation description and reference files to ensure you want this security guidance applied broadly. The supplied evidence does not show hidden execution, credential handling, persistence, or exfiltration.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 76% confidence
• Finding: The description is very broad and can cause the skill to activate on many generic 'security' or 'audit' requests. Over-broad activation increases the chance that this skill's restrictive instructions override more appropriate task-specific behavior, which can create unsafe or unintended operational decisions at runtime.

VirusTotal

65/65 vendors flagged this skill as clean.