Ai Agent Tools

• Outcome: Pass
• Latest audit: May 28, 2026 at 11:39 AM UTC
• Version:
  0.1.0

Overview

This appears to be a straightforward Python utility library, but users should avoid exposing its file tools to untrusted prompts or running it with elevated privileges.

Install only if you need generic Python helper tools for an agent workflow. Keep file helpers scoped to a project directory when wrapping them as agent-callable tools, review any agent request before reading or writing sensitive paths, and do not run the script with sudo.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The installation guide recommends running `sudo python ai_agent_tools.py` after downloading code from the internet, but does not warn users that this executes untrusted code with elevated privileges. If the file is malicious or later compromised upstream, this could lead to full system compromise, unauthorized file changes, or persistence with root privileges.

VirusTotal

64/64 vendors flagged this skill as clean.