Time Stamper

• Outcome: Pass
• Latest audit: Jun 9, 2026 at 5:07 PM UTC
• Version:
  0.0.2

Overview

This is a small timestamp-formatting utility with no evidence of hidden data access, persistence, network use, or destructive behavior.

Install this if you want quick formatted timestamps. Be aware the trigger is broad, so the agent may choose it for ordinary date or logging-related requests, but the reviewed behavior is limited to printing timestamp strings.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The trigger phrase is broad enough to activate on many ordinary requests involving dates, times, logging, or debugging, which can cause the skill to be selected when the user did not specifically intend to use it. While the skill appears low risk because it only formats timestamps, over-broad routing can still reduce reliability, create confusing behavior, and in larger agent systems increase the chance of unintended tool invocation.

VirusTotal

65/65 vendors flagged this skill as clean.