Doctorbot Healthcheck Free

• Outcome: Pass
• Latest audit: May 28, 2026 at 12:52 PM UTC
• Version:
  0.1.0

Overview

This skill appears to perform a disclosed read-only health and security check, with no evidence of persistence, exfiltration, or destructive behavior.

Install this if you want an agent to run read-only local health and security checks. Because it may inspect ports, firewall status, update state, and system vitals, use it only on machines where you are comfortable sharing that diagnostic information with the agent session, and treat any paid/pro hardening features as separate from this free read-only version.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger phrase "Run a health check" is generic and overlaps with normal user language, making accidental invocation plausible in unrelated conversations. In a security-audit skill, unintended execution could expose system information, run sensitive host inspection commands, or create confusion about whether the user explicitly consented to auditing the machine.

VirusTotal

66/66 vendors flagged this skill as clean.