Security audit
Cruise Product Skill Pack
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward cruise-product search integration that calls a disclosed remote MCP gateway and does not include local code, persistence, or privileged behavior.
Before installing, understand that cruise searches and product lookup requests will be sent to the configured CruiseSkillBridge/olavacations remote service and may be counted for gateway statistics. The artifacts do not show local file access, credential use, or persistent behavior.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
57/57 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.