Security audit
cv-enhancer
Security checks across malware telemetry and agentic risk
Overview
This is a simple resume-improvement skill with no executable code, persistence, hidden instructions, or suspicious data handling.
Before using it, review the resume text you provide because it may contain personal information. The skill appears safe to install, but users should verify that any optimized accomplishments or numbers remain truthful and should avoid sharing credentials or unrelated sensitive data.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.