Discount Info

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:23 PM UTC
• Version:
  0.1.0

Overview

This is a simple discount-information skill with no executable code, install actions, credential use, or persistence.

Safe to install for general discount guidance. Avoid sharing payment details, credentials, or private account information when asking for deals, and verify time-sensitive offers directly with the retailer before relying on them.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The example trigger phrases are generic enough to match ordinary user help requests, which can cause the skill to activate outside its intended discount-information scope. This increases the risk of misrouting user queries, confusing users, and unintentionally exposing the skill in contexts where it was not explicitly invoked.

VirusTotal

64/64 vendors flagged this skill as clean.