Security audit

Sphero Mini Control

Security checks across malware telemetry and agentic risk

Overview

The skill’s robot-control purpose is coherent, but its troubleshooting docs recommend broad, persistent system privilege changes without enough scoping or rollback guidance.

Review before installing. The core skill appears to do what it says, but avoid copying the privileged Linux troubleshooting commands unless you understand their system-wide effects. Prefer the bleak setup, run examples in a clear supervised area, and do not grant persistent capabilities to the global python3 binary unless you can verify and later undo that change.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: These movement examples directly actuate a physical robot but do not warn users to operate it in a clear, supervised area away from people, pets, stairs, fragile objects, and traffic paths. In a robotics-control skill, omission of a physical safety notice can lead users to run example code indoors or near hazards, causing collisions, property damage, or minor injury.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The random autonomous movement example is more hazardous than directed movement because it produces unpredictable speed, direction, and duration changes without any safety disclaimer. In context, this can startle pets, strike objects, or send the robot into unsafe areas, especially since the example is explicitly framed as 'Cat Play' and may encourage use around animals.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The troubleshooting guide recommends privileged system commands such as restarting Bluetooth services with sudo, but it does not warn users about the system-wide effects or the risks of running copied commands as root. In documentation for a hardware control skill, this is a real safety issue because users may execute these commands blindly, potentially disrupting services or normalizing unsafe privilege use.

Missing User Warnings

Medium

Confidence: 99% confidence
Finding: The guide suggests granting the Python interpreter global network capabilities via setcap without explaining the security consequences. This is more dangerous than a one-time sudo invocation because it permanently changes interpreter privileges, potentially allowing any Python script run through that binary to access privileged Bluetooth/network operations and expanding the blast radius of unrelated code execution.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.