Security audit
image-hosting
Security checks across malware telemetry and agentic risk
Overview
This skill clearly explains that it uploads user-selected images to a public hosting service and warns users not to upload private or sensitive content.
Before installing, understand that any image uploaded through this skill becomes publicly accessible to anyone with the URL and may be permanent. Do not use it for screenshots containing secrets, personal information, internal systems, or anything you may later need to reliably retract.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.