Security audit
Browser Extension Enabler
Security checks across malware telemetry and agentic risk
Overview
The skill openly aims to reconnect a browser extension by moving and clicking the real mouse, but its automation is brittle and the referenced PowerShell script is missing from the package.
Review before installing. Only use this if you intentionally want an agent to control your real mouse, verify the missing PowerShell script before any run, use TestMode and calibrated coordinates first, and avoid unattended execution unless the browser state is controlled.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.