Client Onboarding Automator

• Outcome: Review
• Latest audit: May 29, 2026 at 9:24 PM UTC
• Version:
  1.0.0

Overview

The skill has a legitimate onboarding purpose, but it automates client emails, contracts, Stripe payment links, CRM updates, and delayed follow-ups without clear approval or stop controls.

Review before installing. Use only scoped Stripe and email credentials, require manual approval before any client-facing email, contract, proposal, payment link, CRM update, or scheduled follow-up, and ensure there is a visible way to cancel or audit delayed messages.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The skill automates outward-facing actions involving client communications, payment collection, and project-system changes without any explicit confirmation gates, audit requirements, or warning about handling sensitive client data. In this context, malformed triggers, spoofed inquiries, or misparsed inputs could cause unauthorized emails, payment links, or workspace creation against real external systems.

VirusTotal

66/66 vendors flagged this skill as clean.