Security audit
Dependency License Checker / 依赖许可证合规检查器
Security checks across malware telemetry and agentic risk
Overview
This is a documentation-only dependency license checking skill with no hidden scripts or automatic execution found.
Install only if you want an agent helper for dependency license review. Run it on repositories you are authorized to scan, confirm the intended project path, and verify any future Pro scheduling, email alert, or network-enabled behavior before using those features.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.