Security audit
Ai Agent Security Audit
Security checks across malware telemetry and agentic risk
Overview
This is a documentation-only security-audit checklist for AI agents, with no code, install scripts, persistence, or hidden data handling.
Install this only if you want a high-level AI-agent security audit checklist. Before using it, define the exact agent, workspace, tools, MCP servers, and data sources in scope, and do not treat the pricing or author claims as verified professional audit coverage.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
52/52 vendors flagged this skill as clean.