Security audit
ia-nodejs-backend
Security checks across malware telemetry and agentic risk
Overview
This skill is a coherent Node.js backend guidance package with no executable install code or hidden high-impact behavior.
This appears safe to install as a coding guidance skill. It can influence backend implementation choices and may prompt documentation lookup or security tooling during relevant Node.js work, so review generated code normally before applying changes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.