Security audit
Kirklin Typst
Security checks across malware telemetry and agentic risk
Overview
This skill is a coherent Typst document-template helper with a disclosed compile script and no evidence of hidden data access or unsafe behavior.
Install only if you want an agent to copy and edit bundled Typst templates and run local document compilation tools. Review generated documents before sharing them, and avoid setting a broad Typst --root unless the document genuinely needs access to that directory.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.