Business Definition

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only business strategy framework with no code, credentials, persistence, or external access.

Reasonable to install from an agentic-security perspective. Treat its restructuring outputs as advisory business analysis, and have qualified leadership, finance, legal, and HR stakeholders review any real organizational changes before acting on them.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 94% confidence
Finding: The trigger list includes very broad phrases like 'business definition' and 'business units' that are likely to appear in ordinary enterprise conversations, increasing the chance of unintended skill activation. While the skill content itself is not overtly dangerous, accidental invocation can cause context switching, irrelevant structured output, or workflow interference in unrelated discussions.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal