Model Resource Profiler

• Outcome: Pass
• Latest audit: May 28, 2026 at 10:33 AM UTC
• Version:
  0.1.1

Overview

This skill is a local profiler-report helper that reads user-selected JSON/JSON.GZ artifacts and writes reports, with no evidence of hidden access or unsafe behavior.

Install if you are comfortable running the included Python analyzer on profiler artifacts you choose. Use trusted JSON or JSON.GZ exports, avoid pointing it at unrelated private files, and choose report output paths you recognize.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 70% confidence
• Finding: Without declared permissions the skill's intent is opaque and cannot be validated.

VirusTotal

66/66 vendors flagged this skill as clean.