Debate Learning Workflow

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:28 PM UTC
• Version:
  1.0.1

Overview

This is an instruction-only debate workflow that discloses local note files and shows no hidden code, credential access, or destructive behavior.

Safe to install based on the provided artifacts. Expect the skill to create or append debate and lesson Markdown files on your Desktop, and avoid using sensitive topics unless you are comfortable with those notes being saved locally.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

• Confidence: 94% confidence
• Finding: The skill explicitly instructs writing debate outputs to fixed paths on the user's Desktop and home directory without any warning, consent, or mention of filesystem side effects. Even though the files are ordinary markdown artifacts, silent local file creation/modification can violate user expectations, overwrite existing notes, or leak sensitive debate content into predictable locations.

VirusTotal

66/66 vendors flagged this skill as clean.