FlyAI Env Guardian

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed, instruction-only helper for finding exposed secrets in a codebase, with file and shell access that fits that purpose.

Install this only in repositories where you are comfortable letting the agent read source files, staged changes, and possibly git history. Review any proposed .gitignore edits, .env.example generation, or pre-commit hook setup before accepting changes, and handle scan output carefully because it may include real secret values or locations.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal