Security audit
Echo Gate
Security checks across malware telemetry and agentic risk
Overview
Echo Gate is a disclosed helper for managing a local agent-tool gateway, including sensitive key operations that fit its stated purpose.
Install this only if you want an agent to help manage Echo Gate tools and keys. Review the external npm package before global installation, keep ECHO_GATE_ADMIN_TOKEN and egk_ API keys out of chat, commits, docs, and memory, and approve key creation, revocation, remote deployment, and paid-tool preparation actions deliberately.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.