Security audit
demo-skill2
Security checks across malware telemetry and agentic risk
Overview
This is a small product-idea review skill with narrow, disclosed behavior and no evidence of hidden execution, persistence, or data access beyond the user-provided idea.
This skill appears safe for lightweight product feedback. Users should still confirm the agent follows the stated boundary of using only the idea text they provide, because the declared Read capability is unnecessary for most uses of this skill.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.