Security audit
Ponytail Audit
Security checks across malware telemetry and agentic risk
Overview
No malicious or suspicious behavior was evidenced by the supplied scanners, but the actual skill artifact was not available in the workspace for full coherence review.
Installation appears acceptable based on the available clean telemetry, but users should still review the actual skill contents and permissions before installing because the artifact itself was not present for direct inspection in this run.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.