Security audit
lygo-traumacodex
Security checks across malware telemetry and agentic risk
Overview
This skill locally converts user-provided heartbeat timing data into digests and optional audio files without network access or hidden execution.
Install only if you are comfortable processing heartbeat timing data locally. Avoid using clinical or PHI data unless you understand that derived digests, hashes, and optional WAV/output files will be written to disk.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.