Business Model Canvas Analysis

• Outcome: Pass
• Latest audit: Jun 4, 2026, 1:30 AM
• Version:
  1.0.0

Overview

This skill is a simple Business Model Canvas prompt that uses public company information and does not request credentials, local data access, code execution, persistence, or account changes.

Installers should treat this as a formatting and analysis aid for public business research. Use it with a clearly named company or target business model, verify important claims against sources, and avoid providing private or confidential business data unless you intentionally want it included in the analysis.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The skill description is overly broad and can be invoked for many generic business-analysis requests, increasing the chance of accidental or inappropriate routing. This can cause the agent to select this skill in contexts where specialized constraints, better-scoped tools, or safer handling would be more appropriate, leading to unreliable outputs or misuse of externally gathered information.

VirusTotal

64/64 vendors flagged this skill as clean.