Security audit
School Run
Security checks across malware telemetry and agentic risk
Overview
This is a narrowly scoped Google Sheets helper for a school-run schedule, with disclosed live read and update capability but no hidden or unrelated behavior found.
Install or use this only if you recognize the spreadsheet and intend the agent to access school-run schedule data. Keep the Google service account least-privileged, verify the gws CLI and credential path, and require clear confirmation before any command that updates the live sheet.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
