Security audit
API Tester
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward API testing guide; its network activity is expected and disclosed, with no evidence of hidden code or persistence.
Install only if you intend to test APIs. Treat URLs, headers, bodies, and GraphQL queries as data that may leave your machine or affect a remote service; use test environments, avoid real secrets unless necessary, and only monitor endpoints you are authorized to poll.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.