Security audit
Skill Auditor
Security checks across malware telemetry and agentic risk
Overview
This is a text-only skill-auditing checklist with broad workflow rules, but it contains no executable code, install hooks, credential access, persistence, or destructive behavior.
Install this only if you want an assertive skill-review workflow that may activate whenever skills are added or changed. Keep its audits scoped to the skill bundle being reviewed, especially if that bundle contains private resources, and be aware it may insist on specific report formatting.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.