Security audit
Fidacy Conversation Receipts
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed guide for adding third-party conversation receipt hashing and anchoring, with no hidden code or automatic behavior in the artifact itself.
Before installing, review the @fidacy/session npm package and Fidacy API terms, keep the API key scoped as narrowly as possible, and confirm that only hashes or intended metadata leave your environment, especially for regulated support, claims, medical, or refund conversations.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.