Storage Exposure Auditor
Security checks across malware telemetry and agentic risk
Overview
This is a manual Azure storage audit skill, but its permission guidance could lead users to grant broader Azure access than the task needs.
Use this only as a manual checklist. Do not grant Storage Account Contributor at subscription scope for this workflow; prefer least-privilege read-only roles such as Reader for account configuration and Storage Blob Data Reader scoped only to the needed storage accounts or resource groups. Provide redacted exported configuration only, never access keys, SAS secrets, tokens, or credentials.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.