Security audit
Contract Risk Helper
Security checks across malware telemetry and agentic risk
Overview
This skill provides token and cost analysis guidance with privacy cautions, and the artifact shows no code execution or automatic data sharing.
Before using this skill, avoid sharing unnecessary private logs, billing exports, customer data, credentials, or full transcripts. Its own instructions call for redaction and no external uploads unless you explicitly choose that path.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.