Security audit

Binary To From File Converter

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed AgentPMT remote file and encoding conversion helper, with cloud storage behavior that users should treat carefully but no evidence of deception or unsafe automation.

Install only if you want AgentPMT-hosted conversion and temporary cloud file links. Do not use it for passwords, keys, regulated records, private business documents, or malware samples unless you are comfortable sending that content to AgentPMT and receiving signed download URLs.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Vague Triggers

Medium

Confidence: 83% confidence
Finding: The skill advertises broad trigger phrases such as generic encoding/file-conversion language, which can cause an agent to invoke this remote tool in contexts where a local transformation would suffice. Because this tool can upload or retrieve file contents from cloud storage, over-broad activation increases the chance of unnecessary external exposure of sensitive data.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill describes file conversion and cloud-storage behavior, but it does not prominently warn at the point of use that file contents may be transmitted to a third-party remote service and stored temporarily. Users or upstream agents may therefore send confidential documents, attachments, or binaries without informed consent or appropriate data-handling controls.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The `base64-to-file` action explicitly stores decoded content in cloud storage and provides a signed download URL, but the schema text does not warn users that submitted data leaves the immediate agent context and becomes remotely stored and retrievable. This can lead to unintended disclosure of sensitive documents, credentials, or malware samples when users assume the conversion is transient rather than persisted.

Missing User Warnings

Low

Confidence: 84% confidence
Finding: The `file-to-base64` action retrieves contents of a previously uploaded cloud-stored file, but the schema omits a privacy notice that this action reads remote stored data and returns the full file content into the agent workflow. In multi-agent or sensitive-data contexts, users may not realize they are reintroducing private file contents into broader processing, logging, or downstream transmission.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.