Mental Health Psychoeducation

Security checks across malware telemetry and agentic risk

Overview

This is an educational mental health reference skill with clear disclaimers and no code, install scripts, credential access, or background behavior.

Install this only as a general learning aid. Do not rely on it for diagnosis, treatment, medication changes, therapy, or emergencies; for urgent risk, use local emergency services or an appropriate crisis line for your country.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The manifest uses very broad trigger phrases such as mental health, anxiety, and depression that are common in everyday conversation. This can cause the skill to activate in situations where the user did not explicitly request psychoeducation, increasing the chance of unsolicited health-related guidance being injected into sensitive conversations.

Natural-Language Policy Violations

Low
Confidence
80% confidence
Finding
The skill presents US-specific crisis guidance like 988 as default emergency support without first determining the user's country or offering locale-sensitive alternatives. In a real crisis, this may direct non-US users to unreachable or inappropriate services, causing delay in accessing urgent help.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal