Tvs Verify

Security checks across malware telemetry and agentic risk

Overview

This is a markdown-only verification workflow that asks the agent to gather evidence for recent AI changes, with no hidden installer, persistence, or credential handling.

Before installing, understand that this skill is meant to make the agent verify recent work by inspecting files and sometimes running targeted checks. Review proposed commands when verification could trigger slow builds, external services, or access to sensitive local project data.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 90% confidence
Finding: The skill description contains broad trigger phrases such as '验证、确认、测试、证明、检查是否完成' that overlap with common conversational requests. In an agent environment, this can cause the skill to activate when the user did not intend a formal verification workflow, potentially steering execution toward file inspection, command execution, or evidence collection beyond the user's expectation.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal