Security audit
mcp-server-monitor
Security checks across malware telemetry and agentic risk
Overview
This skill is a manual troubleshooting guide for MCP connectors and does not include hidden automation or executable code.
Before using it, remember that adding MCP connectors can grant external services access to account data or quota. Follow the skill's own guidance: grant narrow scopes, avoid unattended use for write/payment/delete tools, and keep OAuth codes, tokens, and session data out of chat.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.