Security Vulnerability Scanner

• Outcome: Pass
• Latest audit: May 28, 2026, 6:00 AM
• Version:
  1.0.0

Overview

This is a simple regex-based code security scanner with no hidden access, persistence, or data-sharing behavior in the artifacts.

Reasonable to install for lightweight checks on code snippets. Treat results as hints rather than a full audit, and avoid pasting real secrets into code samples unless you intend the agent to inspect them.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger pattern "vulnerability" is extremely broad and can match many benign user requests, causing this skill to activate outside its intended scope. Overbroad activation can route unrelated content into a security-analysis workflow, increasing the chance of unintended execution paths, user confusion, or misuse of the skill in contexts it was not designed for.

VirusTotal

64/64 vendors flagged this skill as clean.