Security audit
Search Analyst Pair
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed multi-agent research workflow that appears purpose-aligned, but users should verify the external runtime assets before relying on it.
Install only if you trust the configured main, search, and analyst agents and any underlying providers with the research prompts you send. Use a scoped OpenClaw token, keep agent-to-agent allowlists narrow, and verify the external runtime workflow assets match the published documentation.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
61/61 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.