Ai Competitor Analyzer

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:20 PM UTC
• Version:
  1.0.52

Overview

This is a sparse competitor-analysis skill with vague marketing copy, but it contains no executable code or requests for sensitive access.

Install only if you are comfortable with a very sparse, marketing-level skill. Its security risk appears low from the provided artifacts, but its practical value and ROI claims are not substantiated; review any future version again if it adds code, integrations, credentials, external data sources, or automated actions.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The manifest description is generic ('AI-powered skill for productivity') and does not communicate what the skill actually does, when it should be invoked, or what boundaries apply. Overly broad descriptions can cause over-selection or misuse of the skill, increasing the chance it is triggered in inappropriate contexts and performs actions outside user expectations.

VirusTotal

66/66 vendors flagged this skill as clean.