Security audit
CI发布工程师 环境兼容与命令安全
Security checks across malware telemetry and agentic risk
Overview
This skill provides transparent CI command-safety guidance and does not include hidden code, persistence, credential handling, or unrelated data access.
Reasonable to install for CI command-safety and portability work. Users should still review any generated shell commands before running them, especially in release automation, because the skill is designed to help shape commands that may affect build or deployment workflows.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.