Security audit
Tax Prep — Refundable-Credit Due-Diligence (Form 8867)
Security checks across malware telemetry and agentic risk
Overview
The submitted skill artifacts disclose their admin, observability, and workflow actions and keep them tied to the stated purposes.
Install only if you intend agents to use the connected admin, observability, Slack, Sentry, Axiom, or migration workflows. Review configured tokens and permissions first, and require explicit confirmation before production writes, email sends, Slack posts, destructive migrations, or moderation actions.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.