Design Engineering
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed, project-scoped frontend design workflow with no executable install payload or hidden data handling found.
This appears safe to install for its stated purpose. Use it on projects you trust, since it may edit project files, coordinate sub-agents, run local build or validation commands, and leave research notes in the project directory. Keep normal approvals in place for commands and file changes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.