Security audit
Image Hosting
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward image-upload helper that clearly warns users that uploaded images become public.
Install only if you are comfortable sending selected image files to img402.dev and making them reachable by anyone with the URL. Do not use it for confidential screenshots, personal data, secrets, API keys, or material you may need to remove immediately.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.