Security audit
Pizza Agent (LAUNCH SPECIAL - 4.99)
Security checks across malware telemetry and agentic risk
Overview
This is a small, instruction-only pizza ordering skill with disclosed Google Sheets order logging and no executable code or hidden behavior found.
Before using this for a real shop, verify the delivery-zone and ThumbGate configuration, use a dedicated Google Sheet with narrow permissions, set retention rules for customer phone/address/order data, and require confirmation before finalizing live orders.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.