Legal

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only legal reasoning aid with no code or system access, but users should not treat it as a substitute for a lawyer.

Use this skill for organizing legal questions and spotting issues, not for definitive legal advice. Avoid sharing unnecessary confidential or privileged documents with an agent, and consult a licensed attorney for criminal, immigration, court-deadline, regulated filing, or other high-stakes matters.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The skill is framed broadly as handling 'any legal situation' without clear activation boundaries, jurisdiction limits, subject-matter exclusions, or escalation thresholds. In an agent setting, this can cause the skill to trigger on sensitive, high-stakes matters and produce authoritative-sounding legal guidance outside competence, increasing the risk of harmful or noncompliant output.

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal