pandora

• Outcome: Review
• Latest audit: May 28, 2026 at 1:45 AM UTC
• Version:
  0.1.0

Overview

Pandora presents itself as a secure secrets vault, but the included code is only a stub and does not actually implement the promised secret protection.

Treat this as a review-required placeholder, not a production secrets vault. Do not give it real API keys, passwords, or database credentials unless a complete reviewed implementation, secure input handling, backend configuration, and provenance are provided.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Context-Inappropriate Capability

Medium

• Confidence: 91% confidence
• Finding: The manifest explicitly grants shell execution to a skill whose stated purpose is secrets and configuration vault management. That combination is dangerous because any compromise, misuse, or overly broad implementation can execute arbitrary commands in an environment that likely has access to sensitive credentials, increasing the risk of exfiltration, tampering, or destructive system actions.

VirusTotal

62/62 vendors flagged this skill as clean.