Security audit
Cn Ascii Art
Security checks across malware telemetry and agentic risk
Overview
The supplied scanner telemetry is clean, and no artifact-backed reason for a review hold was provided or found in the available workspace context.
This result is benign based on the clean supplied telemetry and lack of artifact-backed concerns. Because the target artifact contents were not available for direct independent review in the workspace, users should still inspect the skill's own files and requested permissions during installation, especially for any local file access, credentials, external services, or background behavior.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
