Bagman
Security checks across malware telemetry and agentic risk
Overview
Bagman is an instruction-only guide for safer handling of agent secrets and wallet keys, with sensitive actions clearly tied to its stated security purpose.
Install only if you want guidance for secret or wallet workflows. Use a dedicated 1Password vault, prefer short-lived session keys with spending limits, avoid giving agents master keys, and require human review for high-impact credential or transaction use.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.