Security audit
Make
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed Make API integration that can change Make resources, but it requires user approval for writes and gives clear credential-safety guidance.
Install only if you intend to let an agent operate your Make account through Maton. Prefer OAuth, choose the narrowest Make scopes available, verify the target connection/profile before writes, and approve changes only when the resource ID, payload, and effect are clear.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.