Security audit
Frontend Security Review
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward frontend security review skill with only Markdown guidance and templates, no executable code, and no hidden network or persistence behavior.
Before installing, understand that this skill will guide an agent to inspect frontend security-sensitive code and write a local report. That behavior is expected for its purpose; avoid using it on repositories you are not authorized to review, and treat generated reports as potentially sensitive because they may mention vulnerabilities, tokens, payment flows, or auth logic.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.