Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- lib/scanner.js:205
Security audit
OpenScan
Security checks across malware telemetry and agentic risk
Overview
OpenScan appears to be a coherent security-scanning skill whose file access and macOS signature checks fit its stated purpose.
Install only if you want an agent to inspect local binaries or scripts. Treat scan targets as potentially sensitive local data, and review any command the agent proposes before allowing broad directory scans.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.dangerous_exec