Promo Calendar Optimizer

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:18 PM UTC
• Version:
  1.0.0

Overview

This skill is a planning template for ecommerce promotion calendars and does not request code execution, credentials, persistence, or control over external systems.

Reasonable to install as a planning aid. Review any generated promotion calendar before acting on it, especially where paid budget, inventory constraints, team capacity, or the skill's non-commercial license terms matter.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The skill description includes broad invocation cues such as 'Use when the user asks how to schedule promo actions, avoid campaign collisions, or improve consistency of ecommerce momentum,' which can match many ordinary business-planning requests. Overly broad triggers can cause the skill to activate in contexts the user did not intend, leading to unnecessary data exposure to the skill, workflow hijacking, or incorrect automation decisions in adjacent operational contexts.

VirusTotal

63/63 vendors flagged this skill as clean.