Geo Fix Llmstxt

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:35 PM UTC
• Version:
  1.2.0

Overview

This skill is a straightforward website helper that creates llms.txt files, with only ordinary file-output and crawling risks to review.

Install only if you want an agent to crawl a website and generate llms.txt outputs. Run it on sites you own or are allowed to crawl, review generated content before publishing, and check whether llms.txt or llms-full.txt already exist before letting the agent write files.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill explicitly instructs creating `llms.txt` and `llms-full.txt` in the current working directory but does not warn about existing files or require confirmation before overwriting. In an agentic environment, this can cause accidental data loss or clobber user-managed files if the filenames already exist.

VirusTotal

66/66 vendors flagged this skill as clean.