shopping-intent-extractor

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:39 PM UTC
• Version:
  1.0.3

Overview

This instruction-only skill summarizes shopping or payment intent from the current conversation and does not install code, persist data, or perform payments.

Install only if you want the agent to summarize shopping or payment-related details from the current conversation. If your environment has a `payment-intent` command, make sure it is a trusted local tool before allowing this skill to use it.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The trigger phrases are broad and include ambiguous statements that can cause the skill to activate on ordinary conversation, leading it to inspect prior chat content and possibly session metadata without a tightly scoped user request. In a skill that infers shopping/payment intent, overbroad activation increases privacy risk because sensitive financial context may be summarized when the user did not clearly intend that operation.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill description does not warn that it may analyze prior conversation history and session metadata to infer shopping or payment intent. That omission creates a transparency and consent problem, especially because the analyzed data can reveal sensitive purchasing plans, payment status, platforms, and amounts.

VirusTotal

64/64 vendors flagged this skill as clean.