Capability Graph Mapper
Security checks across malware telemetry and agentic risk
Overview
This is a markdown-only security review skill that helps analyze other skills' combined permissions and does not show hidden or unsafe behavior of its own.
This skill appears safe to install for reviewing permission combinations across skills. Users should still avoid feeding it manifests or configs containing unnecessary secrets, and should treat its scores as review guidance rather than a complete security guarantee.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.