Security audit
Clean Code
Security checks across malware telemetry and agentic risk
Overview
The skill is mostly normal clean-code guidance, but it tells agents to run unreviewed local validation scripts from other skill folders.
Install only if you are comfortable with a coding assistant that may edit related files and may try to run local validation scripts from other installed skill folders. Review those referenced scripts separately, keep work under version control, and set clear limits if you only want specific files changed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.