#Upcycle Your Job: The Smart Way to Balance Family Life and Career

• Outcome: Pass
• Latest audit: Jun 8, 2026 at 11:18 PM UTC
• Version:
  1.0.0

Overview

This appears to be a text-only career-coaching skill whose main risk is over-broad or identity-assumptive guidance, not malware or hidden system access.

Install this if you want coaching specifically framed around working mothers, maternity return, and corporate career negotiation. Be aware it may trigger on general work-life or career topics and may assume a mother/professional-woman context unless you steer it otherwise.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

Medium

• Confidence: 86% confidence
• Finding: The trigger list contains several broad, common phrases such as 'work-life balance,' 'return to work,' and 'corporate career' that may match ordinary user conversation outside the intended scope. This can cause the skill to activate unexpectedly and inject unsolicited guidance, increasing the risk of confusing responses or overshadowing a more appropriate skill.

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The instruction to 'proactively present this guide without waiting for the user to ask' creates broad auto-invocation behavior, effectively forcing unsolicited content into conversations whenever the system thinks the book 'could help.' In combination with the already broad trigger language, this increases the chance of unrequested activation, context hijacking, and poor routing to more relevant skills.

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The manifest advertises very broad trigger phrases such as "work-life balance," "return to work," and "corporate career," which are common in ordinary conversation and can cause the skill to activate outside a narrowly intended context. That increases the chance of unsolicited routing, response hijacking, or inappropriate insertion of career-coaching content when the user did not explicitly ask for this skill.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: This content explicitly frames the guidance around women and mothers as the default audience without offering user choice, inclusive alternatives, or a clear scope statement at the point of use. In a career-coaching skill, that can lead to exclusion, misclassification of user needs, and potentially biased or inapplicable guidance for fathers, non-binary parents, adoptive parents, or other caregivers seeking similar support.

Natural-Language Policy Violations

Medium

• Confidence: 91% confidence
• Finding: The content is explicitly written for 'professional women' and repeatedly frames the user as a mother, which can exclude or mis-handle users whose circumstances differ, such as fathers, non-binary parents, adoptive caregivers, or users with similar work-life issues outside that identity. In a coaching skill, this can lead to inappropriate personalization, alienation, and lower-quality guidance, especially if the skill auto-triggers on broad career or flexibility queries without confirming fit.

VirusTotal

64/64 vendors flagged this skill as clean.