Security audit
App Store Changelog
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward release-note helper that reads local git history and has no evidence of hidden network access, persistence, credentials, or destructive behavior.
Install this if you are comfortable letting the agent see commit subjects and touched file names from the repository range you run it on. Use a specific starting tag or ref for private repositories to avoid exposing full history when no tags exist.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.