Dei Statement Drafter

• Outcome: Pass
• Latest audit: May 28, 2026, 10:52 AM
• Version:
  0.1.2

Overview

This is a straightforward local DEI statement drafting helper with disclosed, user-selected file input and optional file output.

Safe to install for normal use. Only pass an experiences file you intend to use in the draft, and choose an output path that will not overwrite anything important.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 82% confidence
• Finding: The skill documentation describes file-writing behavior and an output path parameter, but no explicit permissions model is declared. This creates a mismatch between advertised capabilities and declared constraints, which can lead to unsafe assumptions by users or hosting platforms and increases the risk of unintended file overwrite or abuse if path handling is weak.

VirusTotal

VirusTotal findings are pending for this skill version.