Security audit
TCMS Writer
Security checks across malware telemetry and agentic risk
Overview
This skill drafts brand marketing articles from product materials and does not show hidden publishing, execution, or data-exfiltration behavior.
Before installing, confirm you are comfortable with the skill reading product knowledge-base files and writing draft/review markdown files. Its handling of customer names, internal data, and unpublished product details is disclosed and conservative, but users should still review outputs before any external publication.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.