Security audit

Sv Audio Recording

Security checks across malware telemetry and agentic risk

Overview

This is a document-only audio recording guide with no code, APIs, credential handling, persistence, or hidden behavior.

Installers should expect general educational advice about recording better audio for short videos. Review the broad trigger keywords if precise routing matters in your agent setup, but the package itself contains no executable code, network behavior, credentials, or persistence.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The trigger keywords are broad enough to match many ordinary audio-help requests, which can cause the skill to activate outside its intended scope. Overbroad activation is dangerous because it can hijack routing from more appropriate skills, produce irrelevant guidance, and increase the chance that users receive mismatched advice or unexpected handling of their requests.

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The trigger keywords are broad, generic phrases such as 'audio recording' and 'voice recording', which can cause the skill to activate for ordinary user requests that are not specifically asking for this skill. In an agent ecosystem, overly broad activation can lead to misrouting, unintended invocation, and reduced user control, even though this particular skill is only descriptive and does not request APIs or perform sensitive actions.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.