Rank Tracker

Security checks across malware telemetry and agentic risk

Overview

This appears to be a documentation-only SEO rank tracking skill with no substantiated malicious behavior.

Install only if you want an agent to help with SEO keyword and SERP monitoring. Be aware it may activate on broad ranking-related prompts, so phrase requests clearly and avoid providing private analytics or paid-tool credentials unless needed for the task.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 87% confidence
Finding: Several triggers such as natural-language questions about rankings are broad enough to match ordinary conversation, which can cause unintended invocation of the skill. In an agent environment, over-broad activation can redirect workflow, pull connected ranking/tool data, or produce monitoring actions when the user only wanted discussion or advice.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal