Security audit
marketing-council
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed marketing-advice simulator with scoped local context reading and user-directed advisor file creation.
Before installing, know that this skill can read local marketing context files if present, use web research for current marketing claims, and create advisor notes in .agents/advisors when requested. Those behaviors are appropriate for the skill, but avoid putting secrets in marketing context files unless you want the agent to use them.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
