Daily Motivation

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only motivation skill with no code or external access, though it may involve personal goals and progress details you choose to share.

Safe to install as a lightweight motivational helper. Avoid sharing sensitive medical, financial, credential, or deeply private details in goals, wins, streaks, or accountability prompts, and be aware that common phrases like "motivate me" may activate it.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 94% confidence
Finding: The trigger phrases are common conversational language such as "motivate me" and "inspire me," which makes unintended invocation plausible during ordinary user interactions. In a motivation skill, accidental activation can expose personal goal, progress, or habit-tracking data and cause the assistant to act in the wrong context.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal