Security audit

Table Image

Security checks across malware telemetry and agentic risk

Overview

This skill generates table images as advertised, with a limited third-party emoji download/cache behavior users should know about.

Install this if you want PNG table output for chat platforms. Be aware that npm install pulls the Sharp image library, and tables containing emoji may contact jsDelivr/Twemoji and cache SVG files locally under the skill directory; avoid emoji or clear the cache if you need fully offline rendering.

SkillSpector

By NVIDIA

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Description-Behavior Mismatch

Medium

Confidence: 93% confidence
Finding: The helper performs outbound network access to a third-party CDN and persists fetched content to local disk, which expands the skill's capability beyond simple local table-image generation. Even if intended for emoji rendering, this introduces privacy, integrity, and supply-chain risk because user-provided text can trigger remote requests and cached untrusted content without explicit opt-in.

Context-Inappropriate Capability

Medium

Confidence: 90% confidence
Finding: The code includes remote CDN fetching and redirect handling for functionality that is not obviously necessary for a skill described as a local table-image generator. This makes the skill dependent on external infrastructure and creates a path for metadata leakage and content integrity issues if the CDN, dependency path, or redirect target is compromised.

Missing User Warnings

Low

Confidence: 84% confidence
Finding: The skill writes fetched emoji assets into a local cache and performs network retrieval without any user-facing disclosure. While not directly enabling code execution, silent network and filesystem side effects can violate least surprise, leak usage patterns, and create policy/compliance problems in environments expecting purely local rendering.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: tests/table.test.mjs:23