Spark Context Monitor

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:35 PM UTC
• Version:
  1.0.0

Overview

This skill appears to locally estimate current conversation token usage without hidden transmission, persistence, or account-changing behavior.

Installers should understand that the skill needs access to the current conversation text to estimate token usage, although the reviewed code does not store or upload it. Prefer invoking it with /token if accidental natural-language activation would be disruptive, and verify the package build includes the expected dist/index.js entry.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 86% confidence
• Finding: The trigger phrases are broad, everyday-language prompts such as asking about remaining context or token usage, which can overlap with normal conversation and cause unintended skill activation. In an agent ecosystem, this can redirect user intent, create confusing behavior, and expose session metadata more often than the user explicitly intended.

VirusTotal

65/65 vendors flagged this skill as clean.