Security audit
gstack Handoff
Security checks across malware telemetry and agentic risk
Overview
This skill is a simple handoff-writing helper with disclosed local temp-file storage and no evidence of hidden execution, network access, or exfiltration.
Before installing, understand that the skill may write a handoff summary to a temporary local file. Review the generated handoff for sensitive details, avoid including secrets or private customer data, and delete the temp file when it is no longer needed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.