Life Logging Analyzer

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:34 PM UTC
• Version:
  1.0.0

Overview

This is an instruction-only life-log analysis skill that handles sensitive personal information but does not install code, request credentials, or move data elsewhere.

Install only if you intend to analyze personal life-log data. Provide data exports or files deliberately, redact exact locations, health details, private messages, and third-party information when not needed, and treat generated reports as sensitive personal records.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 87% confidence
• Finding: The Usage section is broadly phrased and can trigger on many ordinary reflection, planning, journaling, or productivity requests, causing the skill to activate outside a narrowly defined scope. Because this skill processes highly sensitive personal data categories such as location, health, messages, photos, and screen time, over-broad invocation increases the risk of unnecessary collection, correlation, and exposure of intimate user information.

VirusTotal

64/64 vendors flagged this skill as clean.