Network Tools

• Outcome: Pass
• Latest audit: Jun 10, 2026 at 4:14 PM UTC
• Version:
  1.0.0

Overview

This is a disclosed remote AgentPMT network-utility skill, with a privacy caution that submitted hostnames and IP addresses may be sent to AgentPMT.

Install only if you are comfortable using AgentPMT for remote network utility calls. Avoid submitting private customer hostnames, internal domains, private IP ranges, MAC addresses, or investigative targets unless external processing by AgentPMT is approved; handle account, wallet, and payment credentials only through the referenced setup flow, not in prompts or logs.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 80% confidence
• Finding: The skill advertises broad discovery terms such as generic networking phrases and even the parameter name "input," which can cause unintended activation in contexts where the user did not explicitly intend to invoke a remote AgentPMT tool. Because this skill performs remote calls, accidental selection can transmit hostnames, IPs, or other network-related data off-platform to an external service.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The DNS and reverse-DNS actions are described as simple utilities, but the markdown does not clearly warn that supplied hostnames and IPs are sent to a remote AgentPMT service for processing. This omission can mislead users or upstream agents into disclosing sensitive internal domains, private IPs, or investigative targets to a third party without informed consent.

VirusTotal

64/64 vendors flagged this skill as clean.