Security audit
Google Tasks
Security checks across malware telemetry and agentic risk
Overview
The available scan evidence is clean and no artifact-backed behavior indicates hidden or unsafe actions.
This looks safe to install based on the supplied evidence. As with any skill, review its displayed instructions and requested permissions before use, especially if a later version asks for credentials, network access, file access, or authority to change external accounts.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
60/60 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.