indie-hacker-strategy

• Outcome: Pass
• Latest audit: May 29, 2026, 8:36 PM
• Version:
  1.1.1

Overview

This is a non-executable indie-hacker strategy guide, and the only meaningful issue is that it may be invoked for some broader startup questions.

Installers should treat this as low risk. Expect general bootstrapped-founder growth advice, and verify business metrics or financial suggestions independently before relying on them. The broad trigger language may make the skill appear for some generic startup or growth questions where a more specific skill could be a better fit.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 85% confidence
• Finding: The invocation description is quite broad and includes many common startup and growth terms, which can cause the agent to select this skill for general business questions outside its intended niche. This is not directly exploitable as code execution or prompt injection, but it can degrade routing accuracy, leading to irrelevant or lower-quality guidance and potentially bypassing more appropriate specialized skills.

VirusTotal

64/64 vendors flagged this skill as clean.