FOSMVVM ViewModel Generator

• Outcome: Pass
• Latest audit: May 28, 2026 at 11:17 AM UTC
• Version:
  2.0.6

Overview

This is a normal Swift code-generation helper with no evidence of hidden access, credential use, networking, or persistence.

Install is reasonable for Swift/FOSMVVM projects. Before accepting generated output, review the proposed files and target paths, use version control, and be careful not to overwrite existing source or localization files unintentionally.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The skill explicitly instructs generation and scaffolding of multiple files in the user's project but does not clearly warn that invoking it may create or modify source and resource files. In an agentic workflow, that omission can cause unintended codebase changes, reduce informed user consent, and increase the chance of accidental overwrite or repository pollution.

VirusTotal

64/64 vendors flagged this skill as clean.