Aura Image Gen

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:29 PM UTC
• Version:
  2.0.0

Overview

This skill is a prompt-planning helper for social media image cards, with no executable code or evidence of hidden access.

Safe to install for visual planning and prompt assembly. Be aware it may activate on broad image-related wording like "draw," and avoid sending sensitive private content to whichever image-generation provider you choose.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 94% confidence
• Finding: The trigger phrase "draw" is overly broad and can match many ordinary user requests that are not asking for this specific skill, causing accidental invocation. In an agent system, unintended activation can route user queries into the wrong workflow, leading to irrelevant actions, degraded reliability, and possible chaining into downstream tools without clear user intent.

VirusTotal

65/65 vendors flagged this skill as clean.