Neomano Internet Speed (Download/Upload)

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:24 PM UTC
• Version:
  0.1.0

Overview

This skill is a disclosed, on-demand internet speed test that contacts Cloudflare and does not show hidden access, persistence, or credential use.

Install only if you are comfortable running a bandwidth test against Cloudflare. Avoid using it on metered, restricted, or sensitive networks unless the test traffic and Cloudflare visibility are acceptable.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 91% confidence
• Finding: The skill performs outbound network activity to Cloudflare speed test endpoints, but the manifest does not declare any corresponding permission or network capability. Undeclared network access weakens transparency and policy enforcement, making it harder for users or the host platform to understand, review, and restrict what the skill can do.

VirusTotal

58/58 vendors flagged this skill as clean.