Shopping Autopilot

• Outcome: Review
• Latest audit: May 29, 2026 at 9:27 PM UTC
• Version:
  1.0.0

Overview

This skill is not malicious, but it can steer an agent toward grocery purchases and delivery bookings without clear approval safeguards.

Review before installing. Use it only if you are comfortable with an agent operating inside grocery accounts, and require it to show the store, cart contents, substitutions, total cost, delivery address, delivery slot, and payment impact before you give explicit final approval.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger phrase "Help me order groceries for this week" is broad, natural language that overlaps with ordinary conversation, making accidental or unintended invocation more likely. In a skill that can autonomously add items, book delivery slots, and confirm orders, broad activation materially increases the chance of unauthorized purchasing actions.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill advertises autonomous grocery ordering and delivery slot booking but does not warn users that it may perform real-world transactions on their behalf. In this context, the omission is dangerous because users may not realize that casual use could lead to purchases, scheduling changes, or confirmed orders with financial and privacy consequences.

VirusTotal

65/65 vendors flagged this skill as clean.