Security audit
Framework Mapping
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward compliance-mapping assistant that reads user-provided documents and maps them to framework controls without hidden installation, persistence, or privileged behavior.
Installers should understand that this skill is meant to analyze potentially sensitive compliance documents. Its file-read and web-fetch permissions are consistent with that purpose, but users should avoid giving it documents or repositories outside the intended compliance review scope.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.