Security audit
File todos
Security checks across malware telemetry and agentic risk
Overview
This skill is a narrow, disclosed file-based todo manager that only guides creation and maintenance of markdown task files in a project todo directory.
Install this if you want agents to maintain persistent project todo files. Review generated todos before relying on them, since the skill can create and rename local markdown files in the project todo workflow, but the inspected artifacts do not show credential use, background execution, network access, or destructive behavior.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.