Security audit
Janitor
Security checks across malware telemetry and agentic risk
Overview
This is a workspace cleanup skill, not malware, but it gives an agent broad unsupervised authority to scan and change files, including sensitive config areas.
Install only if you want an agent to actively maintain and reorganize your workspace. Run it in report-only mode first, require explicit approval before archiving, deleting, editing MEMORY.md, or touching configs, and avoid letting it inspect files containing real API keys unless redaction rules are in place.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.