Back to skill

Security audit

Password Policy Auditor

Security checks across malware telemetry and agentic risk

Overview

This is a coherent password-audit guide with no executable installer or hidden behavior, but users should treat its code searches and optional breached-password lookup as sensitive.

Install only for repositories and authentication systems you are authorized to review. Keep raw audit output private, redact secrets from reports, and skip or replace the HaveIBeenPwned example with an offline breach dataset if your policy forbids sending any password-derived data to a third party.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.