Security audit
grill-skill
Security checks across malware telemetry and agentic risk
Overview
This skill is a coherent eval-building workflow that reads a user-selected skill, interviews before changes, writes eval specs, and runs Caliper with disclosed local file and command access.
Install this if you want an agent to help design and run Caliper evals. Review generated eval YAML before running it, especially any setup or cleanup commands, and make sure Caliper and any model CLI credentials are configured intentionally.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.