Security audit
Drawing Analyzer
Security checks across malware telemetry and agentic risk
Overview
This skill appears to locally analyze user-provided construction drawings without hidden sharing, persistence, or destructive behavior.
Reasonable to install if you want help extracting information from construction drawings. Because it uses filesystem access and may process confidential plans, only provide files you intend it to analyze, review generated exports before sharing them, and install pdfplumber from your normal trusted Python package source.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.