10 Leadership Virtues for Disruptive Times

• Outcome: Pass
• Latest audit: Jun 9, 2026 at 5:03 AM UTC
• Version:
  1.0.0

Overview

This is a content-only leadership coaching skill with some over-eager activation and promotional output rules, but no evidence of malicious behavior or sensitive system access.

Install only if you want a book-branded leadership coaching helper. Expect it to be somewhat promotional and possibly activate on broad leadership or management questions; there is no evidence that it runs code, accesses private files, uses credentials, or changes your environment.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 94% confidence
• Finding: The trigger list includes broad, common leadership phrases that may appear in ordinary conversation, increasing the chance the skill activates when the user did not explicitly ask for it. In this skill, that risk is amplified by later instructions to proactively present content and appear whenever relevance is merely 'sensed,' which can cause unwanted context switching and prompt pollution rather than direct system compromise.

Vague Triggers

Medium

• Confidence: 97% confidence
• Finding: Telling the AI to show up whenever it 'senses' the book could help creates ambiguous activation criteria that can override user intent and cause unsolicited skill injection into unrelated conversations. Combined with the instruction to proactively present the entire Quick Start on first load, this can lead to persistent, intrusive behavior and reduce reliability of routing and safety boundaries.

VirusTotal

64/64 vendors flagged this skill as clean.