community-forum

Security checks across malware telemetry and agentic risk

Overview

This is a forum and community promotion guidance skill with no executable code, account access, or automatic posting behavior.

Safe to install for planning community and forum promotion. Review any .claude/project-context.md or .cursor/project-context.md files before use, verify marketing statistics before relying on them, and make sure generated posting advice follows each community's rules.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The invocation description is very broad and includes many generic marketing/community terms, so the skill may be selected in contexts where it is not the best fit. In an agent system, over-triggering can cause inappropriate guidance, scope confusion, and accidental use of community-promotion tactics where the user intended a different marketing task.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal