System Architecture Engine

Security checks across malware telemetry and agentic risk

Overview

This appears to be a documentation-style architecture guidance skill, with no evidence of hidden execution, data access, or destructive behavior.

Before installing, be aware that this skill may activate on common architecture questions and influence design recommendations. Use it as advisory guidance, and review any architecture decisions before applying them to production systems.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The skill exposes multiple generic activation phrases such as "Design [system]", "Review my architecture", and "What database should I use?" that overlap with ordinary conversation. In agent environments that route user input to skills by phrase matching, this can cause unintended invocation and context capture, especially because the skill then steers broad architecture and system-design workflows.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal