Security audit
Bounty Scam Check
Security checks across malware telemetry and agentic risk
Overview
This skill is a read-only GitHub issue checker whose behavior matches its stated purpose and shows no hidden persistence, data export, or destructive actions.
Before installing, understand that the script uses your authenticated gh CLI to make read-only GitHub API requests for the issue you provide. It is suitable as a lightweight warning tool, but its scam decisions are heuristic and should not replace human judgment about maintainers, payment terms, or repository trust.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.