Back to skill

Security audit

context-optimization

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only context management skill with disclosed agent coordination and checkpointing patterns, and I found no hidden execution, exfiltration, or destructive behavior.

Install only if you want your agent to use context-saving workflows such as selective reads, summaries, subagent delegation, and checkpoint files. Treat the persistence examples as templates to adapt: do not write secrets, credentials, or sensitive conversation details to /tmp, logs, or coordination files unless you control permissions and cleanup.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (6)

Description-Behavior Mismatch

Medium
Confidence
88% confidence
Finding
The module broadens a context-optimization skill into a generic waiting and coordination primitive for resources, async tasks, and plugins. That scope expansion increases the agent's operational surface area and enables unrelated orchestration behaviors that could be reused by other skills for cross-component coordination, which is not justified by the declared purpose.

Context-Inappropriate Capability

Medium
Confidence
91% confidence
Finding
The inter-plugin coordination function allows this skill to wait on and reason about the readiness of other plugins, effectively creating a cross-plugin orchestration channel. In an agent ecosystem, that can be abused to infer plugin state, synchronize multi-step actions across components, or create hidden dependencies that exceed the trust boundary of a context optimization helper.

Context-Inappropriate Capability

Medium
Confidence
93% confidence
Finding
The example demonstrates collective multi-plugin resource monitoring and optimization triggers, which is materially broader than context optimization and normalizes centralized control over other plugins' behavior. Even as example code, it encourages implementations that aggregate state across plugins and trigger coordinated actions, increasing the chance of overreach, denial-of-service, or unintended interference between components.

Context-Inappropriate Capability

Low
Confidence
86% confidence
Finding
The module recommends persisting subagent state to /tmp and inspecting agent logs, which extends the skill from context optimization into filesystem persistence and operational data access. That guidance can expose sensitive task state, credentials, or user data through insecure temporary files or log scraping, especially in shared or multi-user environments.

Session Persistence

Medium
Category
Rogue Agent
Content
# Pattern: Externalize critical state before compaction risk
def preserve_subagent_state(progress):
    """
    Write state to files so it survives compaction.
    """
    # Write to TodoWrite for task state
    todo_state = {
Confidence
88% confidence
Finding
Write state to file

Session Persistence

Medium
Category
Rogue Agent
Content
# Pattern: Externalize critical state before compaction risk
def preserve_subagent_state(progress):
    """
    Write state to files so it survives compaction.
    """
    # Write to TodoWrite for task state
    todo_state = {
Confidence
88% confidence
Finding
Write state to files so it survives compaction. """ # Write to TodoWrite for task state todo_state = { 'completed': progress.completed_tasks, 'pending': progress.pending_ta

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.