Security audit
Charset Fix
Security checks across malware telemetry and agentic risk
Overview
No artifact-backed malicious or review-worthy behavior was available to verify; the supplied scanners did not report a negative finding.
Because the actual skill files were not available in the provided workspace, review the skill contents before installing, especially for permissions, credential handling, network calls, persistence, and data mutation. Based on the supplied scan telemetry alone, there is no concrete reason to hold this skill for Review.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.