Security audit
Test Skill Demo
Security checks across malware telemetry and agentic risk
Overview
This is a simple demo skill that replies with basic status and runtime context, with no evidence of hidden access or harmful behavior.
Safe to install for demo or learning use. Be aware that running it will print basic runtime context, including the current workspace path and Node version, into the conversation.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
51/51 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.