Security audit
check charger availbility
Security checks across malware telemetry and agentic risk
Overview
The skill is a disclosed EV charger availability notifier, with a minor packaging/provenance caveat because the documented charger CLI is not present in the reviewed bundle.
Before installing, confirm where the charger CLI comes from and review it separately, use a restricted Google Places API key with quotas, and only enable cron or notification forwarding for charger targets you are comfortable sending through Google Places and your notification channel.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.