Security audit

Aagent System

Security checks across malware telemetry and agentic risk

Overview

This skill mostly matches its security-research purpose, but it starts long-running worker processes and runs undeclared local shell scripts, so users should review it carefully before installing.

Install only if you intentionally want a long-running local security-research crawler. Review or remove the referenced ~/aass-* scripts before running, use an isolated workspace if possible, and monitor CPU, memory, outbound registry traffic, process count, and generated data files.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec, suspicious.dynamic_code_execution, suspicious.env_credential_access

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: agents/analyzer/agent.cjs:9

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: agents/collector/agent.cjs:110

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: agents/evolver/agent.cjs:162

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: agents/orchestrator/agent.cjs:42

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: agents/researcher/agent.cjs:9

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: agents/scanner/agent.cjs:10

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: bin/agent-manager.cjs:38

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: agents/designer/agent.cjs:61

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: agents/collector/agent.cjs:3

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: agents/ultra-collector/agent.cjs:8