Security audit
sandbase
Security checks across malware telemetry and agentic risk
Overview
The skill gives cautious, user-confirmed instructions for setting up SandBase MCP and does not show hidden or unrelated behavior.
Before installing, understand that this skill can guide your agent to run the official SandBase CLI with npx, complete OAuth in a browser, and register an MCP bridge for a supported client. Only proceed when you intended to connect SandBase, and review the displayed secret-free configuration before confirming registration.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
58/58 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.