Ai Company Ceo 2.0.0

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:39 PM UTC
• Version:
  2.0.1

Overview

This is a transparent AI-company governance skill whose broad coordination permissions fit its stated CEO/orchestrator purpose, though users should limit when and where it can act.

Install this only where you can constrain file paths, API destinations, and which subagents it may contact. Review the dependent AI-company skills as part of the same trust boundary, and prefer explicit user invocation for high-impact governance or crisis workflows.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 82% confidence
• Finding: The trigger list is very broad and includes generic concepts like MLOps, Guardrail, CSAT, and system availability that could match ordinary discussion instead of an explicit request to invoke this powerful governance skill. Because the skill has write, network, and subagent/session permissions, accidental over-invocation could cause unnecessary delegation, data handling, or unintended high-privilege workflow execution.

VirusTotal

66/66 vendors flagged this skill as clean.