Security audit
标后履约合规审查Bid Post Award Compliance Reviewer
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed compliance-review assistant for post-award procurement and construction projects, with bounded knowledge-base lookup and opt-in local archiving.
Before installing, be aware this skill is intended for sensitive procurement and construction compliance materials. Use it with documents you are permitted to process, review any IMA knowledge-base integrations available in your environment, and only enable the optional local archive if you are comfortable saving structured project data on this machine.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.