Security audit

Baoyu Design

Security checks across malware telemetry and agentic risk

Overview

This is a design-production skill whose file, browser, export, and connector behaviors are disclosed and fit its purpose.

Install this if you want an agent to generate and export design artifacts. Be aware it may read design source files you point it at, write project artifacts under designs/, run local preview/export tools, and use external connectors like GitHub, Figma, Canva, image generation, or Google Fonts only as part of those workflows.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec, suspicious.dynamic_code_execution

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: agents/gen-video/dist/cli.mjs:68

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: agents/gen-video/src/orchestrator/encode.ts:64

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: agents/tests/helpers.mjs:35

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: agents/build-preview.mjs:151

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: agents/gen-pptx/dist/capture.iife.js:375

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: agents/gen-pptx/src/browser/capture-editable.ts:32

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: agents/gen-pptx/src/browser/capture-screenshot.ts:11

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: agents/tests/compile-design-system.test.mjs:51

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: agents/vendor/fig-materialize.mjs:325