Security audit
One API Calling GenAI
Security checks across malware telemetry and agentic risk
Overview
The supplied scans do not show unsafe behavior, and I found no artifact-backed reason to hold this skill for review.
This appears acceptable based on the available evidence, but the exact skill files were not present for independent artifact review. Before installing, check the skill's displayed files and install prompts for any unexpected package installs, credential requests, persistent background behavior, or access to private local data.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.