Dji Backup

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward DJI media backup helper that copies files to a NAS, with no evidence of hidden behavior or malware.

Install only if you want an agent to create folders and copy DJI footage from mounted media to the NAS path. Before running it, confirm the detected source card or USB share and the new destination folder, especially if multiple drives are mounted.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The invocation language is broad enough that the skill may trigger on loosely related requests such as generic backup or copy operations, causing the agent to perform file-system actions on removable media and NAS storage without sufficiently specific user intent. In this context, the skill creates directories and copies media files, so accidental activation could lead to unintended data duplication, storage misuse, or copying the wrong source content.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill directs the agent to create destination folders and copy user media files but does not explicitly warn that it will modify storage and duplicate potentially large amounts of personal content. In a skill that operates on mounted volumes and a NAS, lack of disclosure and confirmation increases the chance of unintended writes, privacy issues, and operational mistakes such as copying from the wrong card or to the wrong archive location.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal