Durable Files Weekly Review (Public)

• Outcome: Pass
• Latest audit: May 28, 2026, 10:16 AM
• Version:
  1.0.0

Overview

This skill locally reviews a fixed set of workspace markdown files and creates a report, with cleanup edits explicitly requiring user approval.

Install only if you are comfortable with the skill reading the listed durable workspace files. Review the generated report before acting, and approve deletions or edits only after checking the specific content proposed for removal.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 70% confidence
• Finding: Without declared permissions the skill's intent is opaque and cannot be validated.

VirusTotal

66/66 vendors flagged this skill as clean.