Social Media Content Calendar

• Outcome: Pass
• Latest audit: May 28, 2026 at 1:04 PM UTC
• Version:
  1.0.0

Overview

This is a straightforward social media calendar generator that creates local planning files and does not show hidden code, credential use, or unsafe behavior.

Before installing, note that the skill can create or edit files in your workspace, especially under output/content-calendar/. Use it in a project where those generated calendar files are expected, and review existing files before letting it overwrite them.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Missing User Warnings

Low

• Confidence: 90% confidence
• Finding: The skill directs the agent to create several files under `output/content-calendar/` without explicitly warning the user that it will modify the filesystem. While the writes appear limited to generated deliverables and are consistent with the skill’s purpose, undisclosed file creation can still surprise users, overwrite existing artifacts, or be abused in broader workflows where file writes trigger downstream automation.

VirusTotal

66/66 vendors flagged this skill as clean.