Psyvector Pv31

• Outcome: Review
• Latest audit: May 29, 2026 at 9:26 PM UTC
• Version:
  3.0.0

Overview

This skill does not install code or request system access, but it presents itself for crisis or emergency use while explicitly lowering caution and disabling risk reminders.

Review this skill carefully before installing or using it. It appears to be a persona prompt rather than software with device access, but its emergency-response framing and disabled risk reminders make it unsuitable as a substitute for emergency services or qualified medical, legal, financial, or operational judgment.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill explicitly sets `risk_reminder` to `False` while presenting itself as an emergency/crisis-response persona with a very low `caution_coefficient` of 0.1. In a high-stakes context, suppressing risk reminders can push operators toward fast but insufficiently checked actions, increasing the chance of unsafe decisions during incidents.

VirusTotal

66/66 vendors flagged this skill as clean.