Skill Discovery SEO

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:25 PM UTC
• Version:
  1.0.0

Overview

This is a documentation-only helper for improving skill metadata and discoverability, with no executable code or hidden access requests.

Reasonable to install for help polishing skill metadata and listing text. Review generated copy before publishing so it does not overstate scope, platform support, trust, or capabilities.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The frontmatter description is extremely broad and explicitly targets many ecosystems, tasks, and phases of the skill lifecycle, which can cause the skill to be selected for loosely related requests. In an agentic environment, overbroad routing language increases the chance of inappropriate invocation, metadata poisoning, or trust inflation where the skill is chosen outside its real competence.

VirusTotal

65/65 vendors flagged this skill as clean.