FeliciaOS Confession Generator

• Outcome: Pass
• Latest audit: Jun 7, 2026 at 6:57 AM UTC
• Version:
  1.0.0

Overview

This is a simple writing skill that discloses its Groq API key requirement and has no executable files, install scripts, persistence, or hidden behavior.

Install only if you are comfortable using Groq for model inference. Do not provide real secrets, wallet credentials, private account details, or sensitive financial information in prompts, and manage the GROQ_API_KEY like any other API credential.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The skill declares a required external API credential (GROQ_API_KEY) but does not disclose to users that prompts or potentially sensitive input will be transmitted to Groq for model inference. This creates a real transparency and privacy risk because users may provide confidential financial or personal narrative details under the assumption processing is local or undisclosed.

VirusTotal

64/64 vendors flagged this skill as clean.