Security audit
Bitwarden
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward Bitwarden/Vaultwarden helper that uses the expected rbw command-line tool, but using it can expose vault secrets to the agent session.
Install only if you are comfortable letting the agent run rbw against your Bitwarden or Vaultwarden vault. Review commands before execution, avoid printing full entries unless necessary, and assume any retrieved credentials may appear in terminal output, logs, or the conversation transcript.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.