Security audit
focus-coach
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed paid focus-coaching API wrapper with ordinary external-service, npm CLI, and payment-auth risks but no evidence of hidden or destructive behavior.
Install only if you are comfortable using the pinned awal npm CLI, authenticating a payment-capable wallet or account, and sending your focus situation to the external API. Avoid including secrets, confidential work details, health information, or sensitive personal data, and confirm that each paid request is intentional.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.