DCL Secret Leak Detector
Security checks across malware telemetry and agentic risk
Overview
This is an instruction-only secret scanner with no executable code, network calls, install steps, or persistence in the reviewed artifact.
Safe to install as an instruction-only checklist, but do not grant wallet, purchase, OAuth, filesystem, or network permissions for this skill because its stated function does not need them. Also remember that scanning real secrets places them in the agent context, so use a runtime whose logging and tool access you trust.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.