Security audit
Card News
Security checks across malware telemetry and agentic risk
Overview
This skill is a narrowly scoped credit-card news lookup helper that uses web search/fetching and does not add persistence, privilege, or local data access.
Installers should expect this skill to perform current web lookups about credit cards and to rely on shared card-policy files for source selection and formatting. Review those shared dependencies if you need full transparency into source rules, but this artifact itself does not show hidden execution, data theft, destructive behavior, or overbroad authority.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.