KPainter
Security checks across malware telemetry and agentic risk
Overview
KPainter is a coherent instruction-only skill for using a KPainter account to create videos, slides, images, and lessons, with the main consideration being its API key and credit use.
Install this only if you intend to use KPainter. Verify the kpainter.ai and OriginwiseAI/skills sources, connect only your own API key through the agent's credential flow, monitor credit usage, and avoid submitting sensitive source material unless you are comfortable with KPainter processing it.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
38/38 vendors flagged this skill as clean.