Call Claude Sonnet 4 Agent

• Outcome: Pass
• Latest audit: May 28, 2026 at 11:31 AM UTC
• Version:
  0.1.0

Overview

This skill is a simple brainstorming-role prompt with vague naming but no code, credentials, file access, or persistence.

Install if you want a creative brainstorming role prompt. Keep the meeting minutes curated and avoid putting secrets or untrusted instructions in them, since the skill tells the agent to rely heavily on those notes.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The skill metadata and overview are so broad and self-referential ('AI agent for call claude sonnet 4 agent tasks') that they provide no meaningful trigger boundaries or task scoping. In an agent ecosystem, this can cause the skill to be invoked inappropriately across many contexts, increasing the chance that unrelated conversations inherit the embedded behavioral instructions and creating prompt-scope confusion or unintended authority transfer.

VirusTotal

66/66 vendors flagged this skill as clean.