Security audit
Thepaper
Security checks across malware telemetry and agentic risk
Overview
No scanner issues or artifact-backed security concerns were found in the supplied evidence.
This release has no reported SkillSpector findings and VirusTotal is still pending. Because the actual skill artifacts were not available in this review context, users should still review the skill contents and install it only if its requested access matches what they expect.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
