Security audit
Pwd Tool
Security checks across malware telemetry and agentic risk
Overview
This skill simply prints the current working directory path, with no evidence of hidden access, persistence, network use, or credential handling.
This appears safe for its narrow purpose. Only be careful when sharing its output, because a filesystem path can expose local usernames, project names, or private folder names.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.