Security audit
Typeform
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed Typeform integration that uses Maton's OAuth proxy for user-directed Typeform API actions, with no evidence of hidden or malicious behavior.
Install this only if you are comfortable using Maton as an OAuth proxy for Typeform. Use the intended Typeform connection, protect the MATON_API_KEY, and review any create, update, or delete action before allowing an agent to run it.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.