Security audit
Chaterimo
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed Chaterimo integration that lets an agent read chatbot and support conversation data using a user-provided API key.
Install only if you are comfortable letting the agent read Chaterimo chatbot and conversation data available to the configured API key. Use a least-privilege read-only key where possible, avoid exposing it in prompts or logs, revoke it when no longer needed, and treat returned conversation text as sensitive even though the service advertises PII redaction.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.