Network Speed Test

• Outcome: Pass
• Latest audit: May 29, 2026, 8:24 PM
• Version:
  1.0.0

Overview

This skill is a disclosed network speed test that contacts public test endpoints and does not show credential access, persistence, or hidden behavior.

Install this only if you are comfortable with it contacting Cloudflare and public DNS services to measure your connection. Use reasonable test sizes, especially on metered, shared, or sensitive networks, because large tests can use noticeable bandwidth and memory.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 93% confidence
• Finding: The skill clearly performs outbound network operations to Cloudflare and public DNS servers, but the metadata shown in SKILL.md does not declare any corresponding network permission. Even if the behavior is expected for a speed-test skill, undeclared network capability weakens transparency, consent, and policy enforcement, and could allow unexpected external communication in environments that rely on declared permissions.

VirusTotal

64/64 vendors flagged this skill as clean.