Security audit
LYGO External Lattice Anchor (World Network Layer C)
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed LYGO public-mirror verification helper with opt-in local writes and no evidence of hidden publishing, credential use, persistence, or destructive behavior.
Install only if you work with the LYGO protocol stack and want public mirror verification or local manifest/proposal generation. Keep LYGO_STACK_ROOT pointed at a checkout you control, and treat flags like --write-report, --refresh-local, --build-manifest, and --execute-local-only as intentional local-write actions.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.