Cisco NXOS Hardening

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed hosted API wrapper for generating Cisco NX-OS hardening configuration templates, with no evidence of local code execution or device changes.

Treat generated NX-OS commands as reviewable templates, not production-ready changes. Verify the provider endpoint and review output through normal network change control. Do not include secrets, real credentials, or sensitive internal topology details in requests; use a pseudonymous or null userId when possible.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The skill explicitly collects sessionId, userId, and timestamp metadata but provides no privacy notice, retention limits, purpose limitation, or handling guidance. In a third-party API context, these identifiers can enable user/session tracking and linkage of operational activity, creating unnecessary privacy and audit-risk exposure if logged, shared, or retained insecurely.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal