Procrastination Buster

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only productivity coaching skill with disclosed local task tracking and no code, installs, credentials, or external access.

This skill appears safe to install as a local productivity coach. Before using its accountability features, avoid logging highly sensitive work, health, financial, or personal details unless you are comfortable having those commitments and blockers remembered locally for future check-ins. Expect that broad phrases like "just start" or "stop procrastinating" may invoke it in casual use.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 90% confidence
Finding: The trigger phrases are common conversational language and are likely to match normal user requests outside the user's intent to invoke this specific skill. That can cause unintended activation, surprise behavior, and inappropriate access to the skill's local memory features in contexts where the user only meant to speak generally about procrastination.

Shadow Command Trigger

Medium

Category: Trigger Abuse
Confidence: 72% confidence
Finding: The trigger phrase 'stop procrastinating' begins with the built-in command word 'stop', which can conflict with platform-level controls or create ambiguous parsing. This may lead to accidental interruption handling, misrouting, or invocation confusion that degrades user control and could be abused to interfere with expected command behavior.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal