Security audit
Jogg Api
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed JoggAI API helper with no bundled executable code or scanner-detected malicious behavior, though its referenced runner script is missing from the package.
Install only if you intend to use JoggAI APIs and are comfortable providing a JOGG_API_KEY. Review each requested operation before running it, especially uploads, video generation, webhook create/update/delete actions, and account or quota lookups. Expect the current package may not work as written unless the missing scripts/jogg-v2.sh runner is supplied separately.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.