Billy — SAPCONET SSH Bridge

• Outcome: Review
• Latest audit: May 28, 2026, 10:17 AM
• Version:
  0.1.0

Overview

The skill is a disclosed SSH bridge, but one message script can let crafted message text become commands on the remote SAPCONET host.

Install only if you intentionally use this SAPCONET SSH target. Before running, verify SAPCONET_TARGET, use a least-privileged SSH account, and fix scripts/msg-sapconet.sh to pass message text safely, such as through stdin or strict quoting, before allowing untrusted or variable message content.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: This shell script sends the provided message over SSH to a remote host, which is a network operation that transmits user-supplied data. Although there is a placeholder comment, there is no user-facing confirmation, warning, or explanatory output about the remote transmission behavior in the script itself.

VirusTotal

62/62 vendors flagged this skill as clean.