Security audit
Tracker
Security checks across malware telemetry and agentic risk
Overview
The available signals do not show malicious or review-worthy behavior, but the target skill artifact was not present for direct verification.
The available evidence does not justify holding this skill for Review. Because the actual skill files were not available in the workspace, install only after confirming the skill page shows a coherent purpose, clear setup requirements, and no unexpected requests for credentials, broad filesystem access, or automatic command execution.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.