Security audit
TickTick
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed TickTick integration that uses Maton OAuth access to read and change tasks only when the user approves write actions.
Install only if you trust Maton to handle your TickTick OAuth connection and task data. Keep MATON_API_KEY private, confirm the exact task or project before approving any write action, and revoke the key or delete the Maton connection when you no longer need the integration.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.