Riley AI Visibility

• Outcome: Pass
• Latest audit: Jun 19, 2026 at 8:46 AM UTC
• Version:
  1.0.0

Overview

This skill is a small, disclosed AI-visibility lookup helper that uses paid external x402 GET endpoints, with no executable code or hidden persistence found.

Install only if you want agents to query a third-party AI-visibility service. Review ambiguous activations before spending, especially for broad terms like GEO or AI visibility, and make sure your x402 wallet or payment client has limits you are comfortable with.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger list contains broad phrases such as "does AI recommend," "AI visibility," and "geo audit," which can match normal user conversation outside the narrow intended use case. Overbroad routing can cause this skill to activate unexpectedly, leading an agent to make external paid x402 requests, disclose user queries to a third-party service, or steer workflows toward this skill when another tool would be more appropriate.

VirusTotal

58/58 vendors flagged this skill as clean.