Skill 2
Security checks across malware telemetry and agentic risk
Overview
This local Markdown-to-HTML tool is coherent, but it can turn untrusted Markdown into HTML that runs unsafe browser content.
Review before installing. Use this only for Markdown you trust, or sanitize the generated HTML before opening it in a browser, publishing it, emailing it, or processing user-submitted/third-party Markdown.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
50/50 vendors flagged this skill as clean.